Rezultati pretraživanja za 'Proizvođač: weseek'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-5677 | 4.3 | Reflected cross-site scripting vulnerability in GROWI v4.0.0 and earlier allows remote attackers to inject arbitrary script via unspecified vectors. | 2020-12-03 14:50:00 | 2020-12-03 12:15:00 |
| CVE-2020-5678 | 4.3 | Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to inject arbitrary script via unspecified vectors. | 2020-12-03 14:40:00 | 2020-12-03 12:15:00 |
| CVE-2019-13337 | 5.0 | In WESEEK GROWI before 3.5.0, the site-wide basic authentication can be bypassed by adding a URL parameter access_token (this is the parameter used by the API). No valid token is required since it is not validated by the backend. The website can then | 2020-08-24 17:37:00 | 2019-07-09 20:15:00 |
| CVE-2019-5968 | 6.8 | Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'. | 2019-07-09 14:52:00 | 2019-07-05 14:15:00 |
| CVE-2019-5969 | 5.8 | Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishing attacks via the process of login. | 2019-07-08 20:17:00 | 2019-07-05 14:15:00 |
| CVE-2018-0698 | 3.5 | Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2019-01-23 22:00:00 | 2019-01-09 23:29:00 |
| CVE-2018-16205 | 3.5 | Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page modal. | 2019-01-16 15:07:00 | 2019-01-09 23:29:00 |
| CVE-2018-0655 | 3.5 | Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page. | 2018-09-21 14:03:00 | 2018-09-07 14:29:00 |
| CVE-2018-0654 | 4.3 | Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for creating Wiki page. | 2018-09-21 14:03:00 | 2018-09-07 14:29:00 |
| CVE-2018-0653 | 4.3 | Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view. | 2018-09-21 13:58:00 | 2018-09-07 14:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: