Xlinesoft kayıtları
xlinesoft üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2009-0963Kavram kanıtı | Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via xlinesoft · phprunner · CWE-89 | Yüksek7,5 | — | %2,1 | 19 Mar 2009 |
31İzleyin | CVE-2009-0964Kavram kanıtı | UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privxlinesoft · phprunner · CWE-312 | Yüksek7,5 | — | %1,9 | 19 Mar 2009 |
30İzleyin | CVE-2004-2057İstismar yok | SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.xlinesoft · asprunner | Yüksek7,5 | — | %1,5 | 31 Ara 2004 |
23İzleyin | CVE-2004-2059Kavram kanıtı | Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Seaxlinesoft · asprunner | Orta5,0 | — | %8,8 | 31 Ara 2004 |
22İzleyin | CVE-2004-2060Kavram kanıtı | ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direxlinesoft · asprunner | Orta5,0 | — | %7,9 | 31 Ara 2004 |
21İzleyin | CVE-2004-2058İstismar yok | ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.xlinesoft · asprunner | Orta5,0 | — | %1,8 | 31 Ara 2004 |
8İzleyin | CVE-2006-5956İstismar yok | XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames, and (4) passwords in plaintext in %WINDIR%\Pxlinesoft · phprunner | Düşük2,1 | — | %0,3 | 16 Kas 2006 |
- CVE-2009-096331İzleyin
Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via
YüksekCVSS 7,5Kavram kanıtıEPSS %2xlinesoft · phprunner19 Mar 2009
- CVE-2009-096431İzleyin
UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain priv
YüksekCVSS 7,5Kavram kanıtıEPSS %2xlinesoft · phprunner19 Mar 2009
- CVE-2004-205730İzleyin
SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.
YüksekCVSS 7,5İstismar yokEPSS %2xlinesoft · asprunner31 Ara 2004
- CVE-2004-205923İzleyin
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Sea
OrtaCVSS 5,0Kavram kanıtıEPSS %9xlinesoft · asprunner31 Ara 2004
- CVE-2004-206022İzleyin
ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a dire
OrtaCVSS 5,0Kavram kanıtıEPSS %8xlinesoft · asprunner31 Ara 2004
- CVE-2004-205821İzleyin
ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.
OrtaCVSS 5,0İstismar yokEPSS %2xlinesoft · asprunner31 Ara 2004
- CVE-2006-59568İzleyin
XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames, and (4) passwords in plaintext in %WINDIR%\P
DüşükCVSS 2,1İstismar yokEPSS %0xlinesoft · phprunner16 Kas 2006