Dedecms Vulnerabilidad

Cronología

El año pasado

Versión

5.716
7.5 SP210
5.7 SP28
5.7SP26
5.15

Contramedidas

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined81

Explotabilidad

High0
Functional0
Proof-of-Concept10
Unproven0
Not Defined71

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent11
Network70

Autenticación

Not Defined0
High2
Low54
None25

La interacción del usuario

Not Defined0
Required32
None49

C3BM Index

El año pasado

CVSSv3 Base

≤10
≤20
≤30
≤44
≤521
≤69
≤721
≤819
≤97
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤521
≤611
≤722
≤816
≤97
≤100

VulDB

≤10
≤20
≤31
≤420
≤514
≤610
≤724
≤812
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤613
≤714
≤89
≤911
≤1015

CNA

≤10
≤20
≤30
≤40
≤52
≤62
≤73
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k22
<2k42
<5k17
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k68
<2k13
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (108): 5.0, 5.1, 5.2, 5.3, 5.4, 5.5, 5.6, 5.7, 5.7 SP2, 5.7.1, 5.7.2, 5.7.3, 5.7.4, 5.7.5, 5.7.6, 5.7.7, 5.7.8, 5.7.9, 5.7.11, 5.7.12, 5.7.13, 5.7.14, 5.7.15, 5.7.16, 5.7.17, 5.7.18, 5.7.19, 5.7.21, 5.7.22, 5.7.23, 5.7.24, 5.7.25, 5.7.26, 5.7.27, 5.7.28, 5.7.29, 5.7.31, 5.7.32, 5.7.33, 5.7.34, 5.7.35, 5.7.36, 5.7.37, 5.7.38, 5.7.39, 5.7.41, 5.7.42, 5.7.43, 5.7.44, 5.7.45, 5.7.46, 5.7.47, 5.7.48, 5.7.49, 5.7.51, 5.7.52, 5.7.53, 5.7.54, 5.7.55, 5.7.56, 5.7.57, 5.7.58, 5.7.59, 5.7.61, 5.7.62, 5.7.63, 5.7.64, 5.7.65, 5.7.66, 5.7.67, 5.7.68, 5.7.69, 5.7.71, 5.7.72, 5.7.73, 5.7.74, 5.7.75, 5.7.76, 5.7.77, 5.7.78, 5.7.79, 5.7.81, 5.7.82, 5.7.83, 5.7.84, 5.7.85, 5.7.86, 5.7.87, 5.7.93, 5.7.94, 5.7.95, 5.7.96, 5.7.97, 5.7.98, 5.7.99, 5.7.101, 5.7.102, 5.7.106, 5.7.107, 5.7.108, 5.7.109, 5.7.111, 5.7SP2, 5.8, 6.1.9, 6.2, 7.5 SP2, V57_UTF8_SP2

Tipo de software: Content Management System

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2023-11-164.34.2DedeCMS Backend Management Interface catalog_add.php cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-43275
2023-11-133.53.4DedeCMS spec_add.php cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-48068
2023-09-296.15.9DedeCMS album_add.php AddMyAddon escalada de privilegios$0-$5k$0-$5kProof-of-ConceptNot Defined0.12CVE-2023-5301
2023-09-287.17.0DedeCMS baidunews.php escalada de privilegios$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2023-43226
2023-09-166.66.4DedeCMS select_templets_post.php Privilege Escalation$0-$5k$0-$5kProof-of-ConceptNot Defined0.03CVE-2023-5022
2023-09-127.67.6DedeCMS module_make.php escalada de privilegios$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-40784
2023-09-037.57.3DedeCMS tags.php sql injection$0-$5k$0-$5kProof-of-ConceptNot Defined0.02CVE-2023-4747
2023-08-254.44.4DedeCMS freelist_edit.php cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-40877
2023-08-254.44.4DedeCMS freelist_add.php cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-40876
2023-08-254.44.4DedeCMS vote_edit.php cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-40875

71 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 71 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you need the next level of professionalism?

Upgrade your account now!