Phpheaven Vulnerabilidad

Cronología

Escribe

Chat Software10

Producto

phpHeaven PHPMyChat2
Phpheaven PHPMyChat2
phpHeaven phpMyChat2
Phpheaven phpMyChat2
Phpheaven PhpMyChat2

Contramedidas

Official Fix2
Temporary Fix0
Workaround0
Unavailable6
Not Defined2

Explotabilidad

High2
Functional0
Proof-of-Concept2
Unproven2
Not Defined4

Vector de acceso

Not Defined0
Physical0
Local2
Adjacent0
Network8

Autenticación

Not Defined0
High0
Low0
None10

La interacción del usuario

Not Defined0
Required4
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤54
≤62
≤72
≤80
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤56
≤60
≤72
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤54
≤62
≤72
≤80
≤92
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k4
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

Affected Products (4): PHPMyChat (2), PhpMyChat (1), PhpMyChat Plus (1), phpMyChat (5)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2008-03-254.34.2phpHeaven phpMyChat setup.php3 cross site scriptingChat SoftwareHighUnavailable0.001870.00CVE-2008-1504
2006-11-155.34.7Phpheaven PhpMyChat languages.lib.php3 directory traversalChat SoftwareUnprovenUnavailable0.004290.00CVE-2006-5898
2006-11-155.35.0Phpheaven PhpMyChat Plus Help avatar.php directory traversalChat SoftwareProof-of-ConceptNot Defined0.004320.00CVE-2006-5897
2006-09-297.37.3phpHeaven phpMyChat connected_users.lib.php3 escalada de privilegiosChat SoftwareNot DefinedNot Defined0.028740.00CVE-2006-5088
2006-04-076.56.2phpHeaven PHPMyChat eval sql injectionChat SoftwareProof-of-ConceptUnavailable0.005490.00CVE-2006-1669
2005-12-044.34.3Phpheaven phpMyChat start_page.css.php cross site scriptingChat SoftwareNot DefinedNot Defined0.003150.00CVE-2005-3991
2005-05-164.34.3Phpheaven PHPMyChat start_page.css.php3 cross site scriptingChat SoftwareNot DefinedNot Defined0.002630.00CVE-2005-1619
2001-02-078.48.0Phpheaven phpMyChat escalada de privilegiosChat SoftwareNot DefinedOfficial Fix0.002280.00CVE-2001-1358
2001-02-077.37.0Phpheaven phpMyChat input.php3 autenticación débilChat SoftwareNot DefinedOfficial Fix0.003010.00CVE-2001-1357

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!