Rezultati pretraživanja za 'Proizvođač: zend'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-25238 | 3.5 | Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitise_server_side contig is not set t | 2022-07-08 00:58:00 | 2022-06-28 22:15:00 |
| CVE-2020-19316 | 6.8 | OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17. | 2021-12-22 03:42:00 | 2021-12-20 20:15:00 |
| CVE-2021-43617 | 7.5 | Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/ValidatesAttributes.php lacks a check for .phar files, which are handled as application/x-httpd-php on systems ba | 2021-11-18 16:21:00 | 2021-11-14 16:15:00 |
| CVE-2013-20002 | 7.5 | Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax.php file. | 2021-06-23 12:41:00 | 2021-06-17 16:15:00 |
| CVE-2021-27888 | 4.3 | ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters. | 2021-03-09 17:33:00 | 2021-03-02 01:15:00 |
| CVE-2020-8984 | 5.0 | lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header. | 2020-03-27 17:39:00 | 2020-03-24 21:15:00 |
| CVE-2020-8985 | 6.8 | ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality. | 2020-03-27 17:30:00 | 2020-03-24 21:15:00 |
| CVE-2020-8986 | 7.5 | lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an attacker to gain administrative access with a large number of requests. | 2020-03-27 17:28:00 | 2020-03-24 21:15:00 |
| CVE-2014-8089 | 7.5 | SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte. | 2020-02-20 15:04:00 | 2020-02-17 22:15:00 |
| CVE-2015-3154 | 4.3 | CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences i | 2020-01-30 18:51:00 | 2020-01-27 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: