Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2720▼ 598 respecto a la semana anterior
Críticas / altas1299▼ 202 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 4.9% | 💥 Exploit | Babygekko | 23/1/2020 | 16/6/2026 | BabyGekko before 1.2.4 allows PHP file inclusion. | |
| Modificada | Alta (8.8) | 1.8% | 💥 Exploit | Babygekko | 23/1/2020 | 16/6/2026 | BabyGekko before 1.2.4 has SQL injection. | |
| Modificada | Media (4.3) | 1.8% | 💥 Exploit | Babygekko Baby Gekko | 22/9/2014 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/index.php or the (2) username or (3) password parameter in blocks/loginbox/loginbox.template.php to index.php. NOTE: some of these details are… | |
| Modificada | Media (5) | 2.8% | 💥 Exploit | Babygekko Baby Gekko | 3/7/2012 | 16/6/2026 | Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php. | |
| Modificada | Media (4.3) | 1.6% | 💥 Exploit | Babygekko Baby Gekko | 3/7/2012 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email_address, (3) password, (4) password_verify, (5) firstname, (6) lastname, or (7) verification_code… | |
| Modificada | Media (4.3) | 1.6% | 💥 Exploit | Babygekko Baby Gekko | 3/7/2012 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) groupname parameter in a savecategory in the users module; (2) virtual_filename, (3) branch, (4) contact_person, (5) street, (6) city, (7) province, (8) postal, (9)… |