Sitracker Schwachstellen

Zeitverlauf

Typ

Produkt

Sitracker Support Incident Tracker18

Massnahmen

Official Fix6
Temporary Fix0
Workaround0
Unavailable6
Not Defined6

Ausnutzbarkeit

High4
Functional0
Proof-of-Concept6
Unproven2
Not Defined6

Zugriffsart

Not Defined0
Physical0
Local0
Adjacent0
Network18

Authentisierung

Not Defined0
High0
Low6
None12

Benutzeraktivität

Not Defined0
Required4
None14

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤56
≤62
≤74
≤86
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤56
≤64
≤74
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤56
≤62
≤74
≤86
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k4
<5k14
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploit heute

<1k18
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

Affected Products (1): Support Incident Tracker (18)

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
27.05.20124.34.3Sitracker Support Incident Tracker Error Message index.php Cross Site ScriptingTicket Tracking SoftwareNot DefinedNot Defined0.001170.00CVE-2012-2235
29.01.20125.35.0Sitracker Support Incident Tracker Installation translate.php Information DisclosureTicket Tracking SoftwareProof-of-ConceptNot Defined0.003050.00CVE-2011-5075
29.01.20126.36.0Sitracker Support Incident Tracker user_profile_edit.php Cross Site Request ForgeryTicket Tracking SoftwareNot DefinedOfficial Fix0.002040.00CVE-2011-5074
29.01.20124.33.9Sitracker Support Incident Tracker contact_support.php Cross Site ScriptingTicket Tracking SoftwareProof-of-ConceptOfficial Fix0.004980.00CVE-2011-5073
29.01.20127.37.0Sitracker Support Incident Tracker SQL InjectionTicket Tracking SoftwareNot DefinedOfficial Fix0.001320.00CVE-2011-5072
29.01.20127.36.9Sitracker Support Incident Tracker translate.php erweiterte RechteTicket Tracking SoftwareProof-of-ConceptNot Defined0.025740.00CVE-2011-4337
28.01.20127.37.0Sitracker Support Incident Tracker Marketing report_marketing.php SQL InjectionTicket Tracking SoftwareNot DefinedOfficial Fix0.002480.00CVE-2011-5071
28.01.20124.34.3Sitracker Support Incident Tracker incident_attachments.php html_redirect Cross Site ScriptingTicket Tracking SoftwareHighUnavailable0.003730.00CVE-2011-5070
28.01.20126.35.8Sitracker Support Incident Tracker File Upload incident_attachments.php PufferüberlaufTicket Tracking SoftwareUnprovenUnavailable0.009910.00CVE-2011-5069
28.01.20126.36.3Sitracker Support Incident Tracker user_delete.php Cross Site Request ForgeryTicket Tracking SoftwareHighUnavailable0.002250.00CVE-2011-5068

8 weitere Einträge werden nicht mehr angezeigt

Do you need the next level of professionalism?

Upgrade your account now!