zcms project kayıtları
zcms project üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2015-7346Kavram kanıtı | SQL injection vulnerability in ZCMS 1.1.zcms project · zcms · CWE-89 | Kritik9,8 | — | %3,7 | 7 Haz 2017 |
39İzleyin | CVE-2022-28521İstismar yok | ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.zcms project · zcms | Kritik9,8 | — | %1,6 | 26 Nis 2022 |
21İzleyin | CVE-2022-28522İstismar yok | ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.zcms project · zcms · CWE-79 | Orta5,4 | — | %0,6 | 26 Nis 2022 |
19İzleyin | CVE-2015-7347Kavram kanıtı | Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.zcms project · zcms · CWE-79 | Orta4,8 | — | %1,1 | 20 Eyl 2017 |
- CVE-2015-734640Planlayın
SQL injection vulnerability in ZCMS 1.1.
KritikCVSS 9,8Kavram kanıtıEPSS %4zcms project · zcms7 Haz 2017
- CVE-2022-2852139İzleyin
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.
KritikCVSS 9,8İstismar yokEPSS %2zcms project · zcms26 Nis 2022
- CVE-2022-2852221İzleyin
ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.
OrtaCVSS 5,4İstismar yokEPSS %1zcms project · zcms26 Nis 2022
- CVE-2015-734719İzleyin
Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.
OrtaCVSS 4,8Kavram kanıtıEPSS %1zcms project · zcms20 Eyl 2017