Availscript Vulnerabilidad

Cronología

Escribe

Not Defined10

Producto

AvailScript Article Script4
AvailScript Jobs Portal Script4
Availscript Photo Album2

Contramedidas

Official Fix0
Temporary Fix0
Workaround0
Unavailable10
Not Defined0

Explotabilidad

High8
Functional0
Proof-of-Concept2
Unproven0
Not Defined0

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network10

Autenticación

Not Defined0
High0
Low2
None8

La interacción del usuario

Not Defined0
Required4
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤54
≤60
≤72
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤54
≤62
≤70
≤84
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤54
≤60
≤72
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k4
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

Affected Products (4): Article Script (4), Classmate Script (1), Jobs Portal Script (2), Photo Album (2)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2009-08-216.35.6AvailScript Jobs Portal Script File Upload editlogo.php desbordamiento de búferDesconocidoProof-of-ConceptUnavailable0.007070.00CVE-2008-7021
2009-08-056.35.6AvailScript Article Script File Upload escalada de privilegiosDesconocidoProof-of-ConceptUnavailable0.007070.00CVE-2008-6900
2009-02-037.37.3AvailScript Article Script view.php sql injectionDesconocidoHighUnavailable0.000640.02CVE-2008-6037
2008-10-017.37.3Availscript Classmate Script viewprofile.php sql injectionDesconocidoHighUnavailable0.000640.00CVE-2008-4375
2008-10-017.37.1AvailScript Jobs Portal Script sql injectionDesconocidoHighUnavailable0.000640.00CVE-2008-4373
2008-10-014.34.3AvailScript Article Script articles.php cross site scriptingDesconocidoHighUnavailable0.003670.00CVE-2008-4372
2008-10-017.37.3AvailScript Article Script articles.php sql injectionDesconocidoHighUnavailable0.002030.02CVE-2008-4371
2008-10-014.34.3Availscript Photo Album pics.php cross site scriptingDesconocidoHighUnavailable0.002200.00CVE-2008-4370
2008-10-017.37.3Availscript Photo Album pics.php sql injectionDesconocidoHighUnavailable0.001020.00CVE-2008-4369

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!