Comersus Open Technologies Vulnerabilidad

Cronología

Escribe

Producto

Comersus Open Technologies Comersus Backoffice Lit ...6
Comersus Open Technologies Comersus Cart4
Comersus Open Technologies Comersus BackOffice Plu ...2

Contramedidas

Official Fix0
Temporary Fix0
Workaround0
Unavailable2
Not Defined10

Explotabilidad

High2
Functional0
Proof-of-Concept4
Unproven0
Not Defined6

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network12

Autenticación

Not Defined0
High0
Low0
None12

La interacción del usuario

Not Defined0
Required10
None2

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤510
≤60
≤70
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤510
≤60
≤70
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤510
≤60
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k10
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k12
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (3): Comersus BackOffice Plus (1), Comersus Backoffice Lite (4), Comersus Cart (6)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2007-06-204.34.2Comersus Open Technologies Comersus Cart comersus_customerauthenticateform.asp cross site scriptingDesconocidoHighUnavailable0.004570.02CVE-2007-3324
2007-06-207.37.1Comersus Open Technologies Comersus Cart comersus_optreviewreadexec.asp sql injectionDesconocidoHighUnavailable0.003080.02CVE-2007-3323
2005-11-014.34.1Comersus Open Technologies Comersus Backoffice Lite comersus_backoffice_supporterror.asp cross site scriptingDesconocidoProof-of-ConceptNot Defined0.001020.00CVE-2005-3397
2005-10-164.34.3Comersus Open Technologies Comersus BackOffice Plus comersus_backoffice_searchitemform.asp cross site scriptingDesconocidoNot DefinedNot Defined0.002300.02CVE-2005-3285
2005-07-114.34.1Comersus Open Technologies Comersus Cart Shopping Cart cross site scriptingDesconocidoProof-of-ConceptNot Defined0.002850.00CVE-2005-2191
2005-07-117.37.3Comersus Open Technologies Comersus Cart Shopping Cart comersus_optaffiliateregistrationexec.asp sql injectionDesconocidoNot DefinedNot Defined0.001560.03CVE-2005-2190
2005-05-024.34.1Comersus Open Technologies Comersus Cart cross site scriptingDesconocidoNot DefinedOfficial Fix0.002840.00CVE-2005-1010
2005-05-024.34.3Comersus Open Technologies Comersus Backoffice Lite comersus_supporterror.asp cross site scriptingDesconocidoNot DefinedNot Defined0.002570.00CVE-2005-0303
2005-05-027.37.3Comersus Open Technologies Comersus Backoffice Lite default.asp sql injectionDesconocidoNot DefinedNot Defined0.001770.02CVE-2005-0302
2005-05-027.37.3Comersus Open Technologies Comersus Backoffice Lite comersus_backoffice_install10.asp Remote Code ExecutionDesconocidoNot DefinedNot Defined0.007180.00CVE-2005-0301

1 no se muestran más entradas

Interested in the pricing of exploits?

See the underground prices here!