Read the docs

Kajitori Co.,Ltd

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Kajitori Co.,Ltd records in CISA KEV

No Kajitori Co.,Ltd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Exment 7 records MEDIUM Laravel-admin 3 records MEDIUM

Records

7 records in Exment · all components

TI-2022-17407 CVE-2022-37333 · GHSA-p74q-2pf8-j5jx

SQL injection in Kajitori Co.,Ltd Exment

Priority MEDIUM 41

SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earl…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01444 Published 2022-08-24 Fixed in 5.0.3, 4.4.3 +2 CWE-89
TI-2022-17800 CVE-2022-38089 · GHSA-j9wf-qqm9-mw2c

Cross-site scripting in Kajitori Co.,Ltd Exment

Priority LOW 26

Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00933 Published 2022-08-24 No fix listed CWE-79
TI-2022-17793 CVE-2022-38080 · GHSA-8629-83m5-rj75

Cross-site scripting in Kajitori Co.,Ltd Exment

Priority LOW 26

Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00933 Published 2022-08-24 Fixed in 5.0.3, 4.4.3 +2 CWE-79
TI-2020-04587 CVE-2020-5619 · GHSA-337r-3rxv-c739

Cross-site scripting in Kajitori Co.,Ltd Exment

Priority LOW 26

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00664 Published 2020-08-25 Fixed in v3.6.0 CWE-79
TI-2020-04588 CVE-2020-5620 · GHSA-39mv-h3p5-v5ch

Cross-site scripting in Kajitori Co.,Ltd Exment

Priority LOW 25

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a specially crafted file.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00635 Published 2020-08-25 Fixed in v3.6.0 CWE-79
TI-2024-32063 CVE-2024-47793 · GHSA-3cq4-j756-cxm8

Cross-site scripting in Kajitori Co.,Ltd Exment

Priority LOW 24

Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00335 Published 2024-10-18 No fix listed CWE-79
TI-2024-31309 CVE-2024-46897 · GHSA-c983-r7vq-6347

Incorrect permission assignment in Kajitori Co.,Ltd Exment

Priority LOW 18

Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00366 Published 2024-10-18 No fix listed CWE-732
Open these records in search →