Vulnerabilities in Polska Akademia Dostępności

9 results

Vexday analysis

A Polska Akademia Dostępności apresenta 9 vulnerabilidades catalogadas, das quais 3 são críticas, mas nenhuma está sob ataque ativo no momento. A fraqueza predominante (CWE-434 - upload de arquivo não validado) sugere controles inadequados de entrada, representando risco potencial em cenários de exposição internet. Não há evidência de exploração recente, indicando um perfil de risco moderado e não urgente.

CVE-2025-7065CRITICALRemote Code Execution via Unrestricted File Upload in PAD CMSEPSS 0.6%CVE-2025-7063CRITICALRemote Code Execution via Unrestricted File Upload in PAD CMSEPSS 0.6%CVE-2025-8120CRITICALRemote Code Execution via Unrestricted File Upload in PAD CMSEPSS 0.5%CVE-2025-8122HIGHBlind SQL Injection in PAD CMSEPSS 0.3%CVE-2025-8121HIGHBlind SQL Injection in PAD CMSEPSS 0.3%CVE-2025-8117HIGHAccount Takeover via Reset Password Functionality in PAD CMSEPSS 0.3%CVE-2025-8116MEDIUMReflected XSS in PAD CMSEPSS 0.2%CVE-2025-8118MEDIUMBruteforce Protection Bypass in PAD CMSEPSS 0.2%CVE-2025-8119MEDIUMCross-Site Request Forgery in PAD CMSEPSS 0.1%