YesWiki kayıtları
yeswiki üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %82,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-502 Deserialization of Untrusted Data1
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2018-13045Kavram kanıtı | SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL yeswiki · cercopitheque · CWE-89 | Kritik9,8 | — | %3,2 | 2 Oca 2019 |
40Planlayın | CVE-2018-1000641İstismar yok | YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.phyeswiki · yeswiki · CWE-502 | Kritik9,8 | — | %2,5 | 20 Ağu 2018 |
39İzleyin | CVE-2025-46348İstismar yok | YesWiki Vulnerable to Unauthenticated Site Backup Creation and Downloadyeswiki · yeswiki · CWE-287 | Kritik9,8 | — | %0,7 | 29 Nis 2025 |
36İzleyin | CVE-2024-51478İstismar yok | Use of a Broken or Risky Cryptographic Algorithm in YesWikiyeswiki · yeswiki · CWE-327 | Kritik9,1 | — | %0,4 | 31 Eki 2024 |
32İzleyin | CVE-2025-31131Kavram kanıtı | Path Traversal allowing arbitrary read of files in Yeswikiyeswiki · yeswiki · CWE-22 | Yüksek7,5 | — | %5,4 | 1 Nis 2025 |
30İzleyin | CVE-2021-43091İstismar yok | An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.yeswiki · yeswiki · CWE-89 | Yüksek7,5 | — | %1,4 | 25 Mar 2022 |
28İzleyin | CVE-2025-24019İstismar yok | YesWiki vulnerable to authenticated arbitrary file deletionyeswiki · yeswiki · CWE-22 | Yüksek7,1 | — | %0,6 | 21 Oca 2025 |
28İzleyin | CVE-2026-34598İstismar yok | YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter"yeswiki · yeswiki · CWE-79 | Yüksek7,1 | — | %0,3 | 2 Nis 2026 |
25İzleyin | CVE-2025-46346İstismar yok | YesWiki Vulnerable to Stored XSS in Commentsyeswiki · yeswiki · CWE-79 | Orta6,3 | — | %0,4 | 29 Nis 2025 |
24İzleyin | CVE-2025-46349Kavram kanıtı | YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 | Orta6,1 | — | %0,6 | 29 Nis 2025 |
24İzleyin | CVE-2025-46549Kavram kanıtı | Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 | Orta6,1 | — | %0,5 | 29 Nis 2025 |
24İzleyin | CVE-2025-46550Kavram kanıtı | Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 | Orta6,1 | — | %0,5 | 29 Nis 2025 |
24İzleyin | CVE-2025-52277İstismar yok | Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta coyeswiki · yeswiki · CWE-79 | Orta6,1 | — | %0,4 | 9 Eyl 2025 |
24İzleyin | CVE-2025-24017İstismar yok | YesWiki Vulnerable to Unauthenticated DOM Based XSSyeswiki · yeswiki · CWE-79 | Orta6,1 | — | %0,4 | 21 Oca 2025 |
23İzleyin | CVE-2025-46347İstismar yok | YesWiki Remote Code Execution via Arbitrary PHP File Write and Executionyeswiki · yeswiki · CWE-116 | Orta5,8 | — | %1,0 | 29 Nis 2025 |
21İzleyin | CVE-2025-24018İstismar yok | YesWiki Vulnerable to Authenticated Stored XSSyeswiki · yeswiki · CWE-79 | Orta5,4 | — | %0,4 | 21 Oca 2025 |
19İzleyin | CVE-2025-46350İstismar yok | Yeswiki Vulnerable to Authenticated Reflected Cross-site Scriptingyeswiki · yeswiki · CWE-79 | Orta4,8 | — | %0,3 | 29 Nis 2025 |
- CVE-2018-1304540Planlayın
SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL
KritikCVSS 9,8Kavram kanıtıEPSS %3yeswiki · cercopitheque2 Oca 2019
- CVE-2018-100064140Planlayın
YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.ph
KritikCVSS 9,8İstismar yokEPSS %2yeswiki · yeswiki20 Ağu 2018
- CVE-2025-4634839İzleyin
YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download
KritikCVSS 9,8İstismar yokEPSS %1yeswiki · yeswiki29 Nis 2025
- CVE-2024-5147836İzleyin
Use of a Broken or Risky Cryptographic Algorithm in YesWiki
KritikCVSS 9,1İstismar yokEPSS %0yeswiki · yeswiki31 Eki 2024
- CVE-2025-3113132İzleyin
Path Traversal allowing arbitrary read of files in Yeswiki
YüksekCVSS 7,5Kavram kanıtıEPSS %5yeswiki · yeswiki1 Nis 2025
- CVE-2021-4309130İzleyin
An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.
YüksekCVSS 7,5İstismar yokEPSS %1yeswiki · yeswiki25 Mar 2022
- CVE-2025-2401928İzleyin
YesWiki vulnerable to authenticated arbitrary file deletion
YüksekCVSS 7,1İstismar yokEPSS %1yeswiki · yeswiki21 Oca 2025
- CVE-2026-3459828İzleyin
YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter"
YüksekCVSS 7,1İstismar yokEPSS %0yeswiki · yeswiki2 Nis 2026
- CVE-2025-4634625İzleyin
YesWiki Vulnerable to Stored XSS in Comments
OrtaCVSS 6,3İstismar yokEPSS %0yeswiki · yeswiki29 Nis 2025
- CVE-2025-4634924İzleyin
YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1yeswiki · yeswiki29 Nis 2025
- CVE-2025-4654924İzleyin
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1yeswiki · yeswiki29 Nis 2025
- CVE-2025-4655024İzleyin
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1yeswiki · yeswiki29 Nis 2025
- CVE-2025-5227724İzleyin
Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta co
OrtaCVSS 6,1İstismar yokEPSS %0yeswiki · yeswiki9 Eyl 2025
- CVE-2025-2401724İzleyin
YesWiki Vulnerable to Unauthenticated DOM Based XSS
OrtaCVSS 6,1İstismar yokEPSS %0yeswiki · yeswiki21 Oca 2025
- CVE-2025-4634723İzleyin
YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution
OrtaCVSS 5,8İstismar yokEPSS %1yeswiki · yeswiki29 Nis 2025
- CVE-2025-2401821İzleyin
YesWiki Vulnerable to Authenticated Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0yeswiki · yeswiki21 Oca 2025
- CVE-2025-4635019İzleyin
Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting
OrtaCVSS 4,8İstismar yokEPSS %0yeswiki · yeswiki29 Nis 2025