Cforms2 Plugin Vulnerabilidad

Cronología

Versión

10.0	2
10.1	2
14.0	1
14.1	1
14.2	1

Contramedidas

Official Fix	7
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	7

Vector de acceso

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	7

Autenticación

Not Defined	0
High	0
Low	0
None	7

La interacción del usuario

Not Defined	0
Required	5
None	2

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	1
≤8	0
≤9	2
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	1
≤8	0
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	5
≤6	0
≤7	0
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	4
≤8	0
≤9	1
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	0
<2k	7
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	7
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (34): 10.0, 10.1, 10.2, 10.3, 10.4, 13.0, 13.1, 14.0, 14.1, 14.2, 14.3, 14.4, 14.5, 14.6, 14.6.1, 14.6.2, 14.6.3, 14.6.4, 14.6.5, 14.6.6, 14.6.7, 14.6.8, 14.6.9, 14.7, 14.8, 14.9, 14.10, 14.11, 14.12, 14.13, 14.13.1, 14.13.2, 15, 15.0.1

Tipo de software: WordPress Plugin

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2019-08-22	8.5	8.4	cforms2 Plugin Tracking DB GUI sql injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2017-18570
2019-08-22	8.5	8.4	cforms2 Plugin sql injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2015-9333
2019-08-22	5.2	5.1	cforms2 Plugin cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-10393
2019-08-22	5.2	5.1	cforms2 Plugin cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-10392
2019-08-21	5.2	5.1	cforms2 Plugin cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-18559
2019-08-21	5.2	5.1	cforms2 Plugin lib_ajax.php cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-10377
2019-08-20	6.5	6.4	cforms2 Plugin cross site request forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2019-15238

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!