zoph kayıtları
zoph üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %71,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2008-6837Kavram kanıtı | SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different izoph · zoph · CWE-89 | Yüksek7,5 | — | %2,3 | 27 Haz 2009 |
31İzleyin | CVE-2008-3258İstismar yok | Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectozoph · zoph · CWE-89 | Yüksek7,5 | — | %1,8 | 22 Tem 2008 |
30İzleyin | CVE-2007-3905İstismar yok | SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the _order parameter tzoph · zoph | Yüksek7,5 | — | %1,2 | 19 Tem 2007 |
27İzleyin | CVE-2014-9235Kavram kanıtı | Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated users to execute arbzoph · zoph · CWE-89 | Orta6,5 | — | %2,0 | 3 Ara 2014 |
18İzleyin | CVE-2014-9236Kavram kanıtı | Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allows remote attackerzoph · zoph · CWE-79 | Orta4,3 | — | %2,6 | 3 Ara 2014 |
18İzleyin | CVE-2008-6838Kavram kanıtı | Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via thzoph · zoph · CWE-79 | Orta4,3 | — | %1,7 | 27 Haz 2009 |
17İzleyin | CVE-2009-2343İstismar yok | Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTMLzoph · zoph · CWE-79 | Orta4,3 | — | %1,0 | 7 Tem 2009 |
- CVE-2008-683731İzleyin
SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different i
YüksekCVSS 7,5Kavram kanıtıEPSS %2zoph · zoph27 Haz 2009
- CVE-2008-325831İzleyin
Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands via unspecified vecto
YüksekCVSS 7,5İstismar yokEPSS %1zoph · zoph22 Tem 2008
- CVE-2007-390530İzleyin
SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the _order parameter t
YüksekCVSS 7,5İstismar yokEPSS %1zoph · zoph19 Tem 2007
- CVE-2014-923527İzleyin
Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated users to execute arb
OrtaCVSS 6,5Kavram kanıtıEPSS %2zoph · zoph3 Ara 2014
- CVE-2014-923618İzleyin
Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allows remote attacker
OrtaCVSS 4,3Kavram kanıtıEPSS %2zoph · zoph3 Ara 2014
- CVE-2008-683818İzleyin
Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via th
OrtaCVSS 4,3Kavram kanıtıEPSS %1zoph · zoph27 Haz 2009
- CVE-2009-234317İzleyin
Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3İstismar yokEPSS %1zoph · zoph7 Tem 2009