Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Kajitori Co.,Ltd Component: Laravel-admin Clear all filters
TI-2022-17800 CVE-2022-38089 · GHSA-j9wf-qqm9-mw2c

Cross-site scripting in Kajitori Co.,Ltd Exment

Priority LOW 26

Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00933 Published 2022-08-24 No fix listed CWE-79
TI-2022-17793 CVE-2022-38080 · GHSA-8629-83m5-rj75

Cross-site scripting in Kajitori Co.,Ltd Exment

Priority LOW 26

Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00933 Published 2022-08-24 Fixed in 5.0.3, 4.4.3 +2 CWE-79
TI-2022-17407 CVE-2022-37333 · GHSA-p74q-2pf8-j5jx

SQL injection in Kajitori Co.,Ltd Exment

Priority MEDIUM 41

SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earl…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01444 Published 2022-08-24 Fixed in 5.0.3, 4.4.3 +2 CWE-89