Photopost الثغرات

التسلسل الزمني

النوع

منتج

PhotoPost PHP Pro8
PhotoPost PhotoPost PHP Pro8
Photopost ReviewPost PHP Pro2
Photopost PHP Pro2
Photopost PhotoPost PHP Pro2

معالجة

Official Fix18
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

قابلية الاستغلال

High0
Functional0
Proof-of-Concept12
Unproven2
Not Defined10

متجه الوصول

Not Defined0
Physical0
Local0
Adjacent0
Network24

توثيق

Not Defined0
High0
Low2
None22

تفاعل المستخدم

Not Defined0
Required16
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤512
≤60
≤72
≤84
≤90
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤46
≤58
≤62
≤74
≤80
≤92
≤102

VulDB

≤10
≤20
≤30
≤42
≤512
≤60
≤72
≤84
≤90
≤104

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k0
<2k16
<5k8
<10k0
<25k0
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k24
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (4): PHP Pro (11), PhotoPost PHP Pro (7), PhotoPost vBGallery (2), ReviewPost PHP Pro (3)

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
26/08/20096.35.8PhotoPost PhotoPost vBGallery File Upload upload.php تجاوز الصلاحياتPhoto Gallery SoftwareProof-of-ConceptUnavailable0.005460.04CVE-2008-7088
11/01/200810.08.7PhotoPost PhotoPost vBGallery File Upload تجاوز الصلاحياتPhoto Gallery SoftwareUnprovenOfficial Fix0.006940.00CVE-2008-0251
18/09/20067.36.9PhotoPost PHP Pro addfav.php تجاوز الصلاحياتProgramming Language SoftwareProof-of-ConceptNot Defined0.133150.00CVE-2006-4990
15/09/20067.36.4PhotoPost PHP Pro zipndownload.php تجاوز الصلاحياتProgramming Language SoftwareUnprovenOfficial Fix0.051090.02CVE-2006-4828
30/08/20054.34.3PhotoPost PHP Pro سكربتات مشتركةProgramming Language SoftwareNot DefinedNot Defined0.008310.00CVE-2005-2737
13/05/20057.36.6Photopost PHP Pro member.php حقن إس كيو إلProgramming Language SoftwareProof-of-ConceptOfficial Fix0.003310.00CVE-2005-1629
02/05/20054.34.1PhotoPost PhotoPost PHP Pro سكربتات مشتركةProgramming Language SoftwareNot DefinedOfficial Fix0.006550.00CVE-2005-0778
02/05/20054.34.1PhotoPost PhotoPost PHP Pro check_tags سكربتات مشتركةProgramming Language SoftwareNot DefinedOfficial Fix0.002840.00CVE-2005-0777
02/05/20054.34.1PhotoPost PhotoPost PHP Pro adm-photo.php سكربتات مشتركةProgramming Language SoftwareNot DefinedOfficial Fix0.021400.00CVE-2005-0776
02/05/20056.36.0PhotoPost PhotoPost PHP Pro Logging misc.php سكربتات مشتركةProgramming Language SoftwareNot DefinedOfficial Fix0.010750.00CVE-2005-0775

13 بعض الادخالات لم يتم عرضها

Interested in the pricing of exploits?

See the underground prices here!