Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3040▲ 560 respecto a la semana anterior

Críticas / altas1452▲ 279 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▲ 175 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-9662	Modificada	Alta (7.5)	1.7%	—	Jtbc PHP	11/3/2019	17/6/2026	An issue was discovered in JTBC(PHP) 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring.
CVE-2019-8433	Modificada	Alta (7.5)	1.2%	—	Jtbc PHP	18/2/2019	17/6/2026	JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file.
CVE-2018-19547	Modificada	Media (6.1)	0.73%	—	Jtbc PHP	26/11/2018	17/6/2026	JTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter.
CVE-2018-19546	Modificada	Alta (8.8)	0.54%	—	Jtbc PHP	26/11/2018	17/6/2026	JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter.
CVE-2018-19327	Modificada	Alta (8.8)	0.49%	—	Jtbc PHP	17/11/2018	17/6/2026	An issue was discovered in JTBC(PHP) 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF.
CVE-2018-18436	Modificada	Alta (8.8)	0.51%	—	Jtbc PHP	17/10/2018	17/6/2026	JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI.
CVE-2018-17838	Modificada	Alta (7.5)	1.5%	—	Jtbc PHP	1/10/2018	17/6/2026	An issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file read operations are possible via a /console/#/console/file/manage.php?type=list&path=c:/ substring.
CVE-2018-17837	Modificada	Alta (7.5)	1.3%	—	Jtbc PHP	1/10/2018	17/6/2026	An issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file deletion is possible via a /console/file/manage.php?type=action&action=delete&path=c%3A%2F substring.
CVE-2018-17836	Modificada	Alta (8.8)	1.6%	—	Jtbc PHP	1/10/2018	17/6/2026	An issue was discovered in JTBC(PHP) 3.0.1.6. It allows remote attackers to execute arbitrary PHP code by using a /console/file/manage.php?type=action&action=addfile&path=..%2F substring to upload, in conjunction with a multipart/form-data PHP payload.