Vulnerabilidades em light0011
13 resultadosAnálise Vexday
Light0011 apresenta 5 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando exposição recente e concentrada. Nenhuma está sob ataque ativo conhecido (KEV) e não há críticas CVSS, mas a fraqueza dominante em controle de acesso (CWE-285) sugere risco moderado de comprometimento de permissões. O padrão de divulgação recente exige monitoramento contínuo apesar da ausência atual de exploração em massa.
CVE-2026-86306MEDIUMlight0011 cms Cookie Helper UserModel.class.php improper authenticationEPSS 0.7%CVE-2026-85381MEDIUMlight0011 cms Chapter Controller ChapterController.class.php authorizationEPSS 0.6%CVE-2026-86308MEDIUMlight0011 cms Debug Mode config.php information disclosureEPSS 0.5%CVE-2026-85378MEDIUMlight0011 cms Chapter Controller ChapterController.class.php _initialize authorizationEPSS 0.5%CVE-2026-86305MEDIUMlight0011 cms Upload.class.php upload unrestricted uploadEPSS 0.5%CVE-2026-85380MEDIUMlight0011 cms UEditor controller.php catchimage server-side request forgeryEPSS 0.5%CVE-2026-85382MEDIUMlight0011 cms Chapter Content Output oneChapter.tpl htmlspecialchars_decode cross site scriptingEPSS 0.5%CVE-2026-85379MEDIUMlight0011 cms Query Builder ChapterController.class.php searchChapter sql injectionEPSS 0.4%CVE-2026-112025MEDIUMlight0011 cms Captcha Validation UserController.class.php access controlEPSS 0.4%CVE-2026-112028MEDIUMlight0011 cms Vote VoteController.class.php logic errorEPSS 0.3%CVE-2026-112027MEDIUMlight0011 cms Uploadify check-exists.php file_exists file information disclosureEPSS 0.3%CVE-2026-86307MEDIUMlight0011 cms cross-site request forgeryEPSS 0.2%CVE-2026-112026MEDIUMlight0011 cms UserModel.class.php sha1 weak password hashEPSS 0.2%