Comersus Open Technologies Vulnérabilités

Chronologie

Taper

Produit

Comersus Open Technologies Comersus Cart8
Comersus Open Technologies Comersus Backoffice Lit ...4

Contre-mesures

Official Fix2
Temporary Fix0
Workaround0
Unavailable4
Not Defined6

Exploitabilité

High4
Functional0
Proof-of-Concept2
Unproven0
Not Defined6

Vecteur d'accès

Not Defined0
Physical0
Local0
Adjacent0
Network12

Authentification

Not Defined0
High0
Low0
None12

Interaction de l'utilisateur

Not Defined0
Required6
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤56
≤60
≤70
≤86
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤56
≤60
≤70
≤86
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤56
≤60
≤70
≤86
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k6
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k12
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (3): Comersus BackOffice Plus (1), Comersus Backoffice Lite (4), Comersus Cart (6)

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
20/06/20074.34.2Comersus Open Technologies Comersus Cart comersus_customerauthenticateform.asp cross site scriptingInconnueHighUnavailable0.004570.02CVE-2007-3324
20/06/20077.37.1Comersus Open Technologies Comersus Cart comersus_optreviewreadexec.asp sql injectionInconnueHighUnavailable0.003080.04CVE-2007-3323
01/11/20054.34.1Comersus Open Technologies Comersus Backoffice Lite comersus_backoffice_supporterror.asp cross site scriptingInconnueProof-of-ConceptNot Defined0.001020.00CVE-2005-3397
16/10/20054.34.3Comersus Open Technologies Comersus BackOffice Plus comersus_backoffice_searchitemform.asp cross site scriptingInconnueNot DefinedNot Defined0.002300.02CVE-2005-3285
11/07/20054.34.1Comersus Open Technologies Comersus Cart Shopping Cart cross site scriptingInconnueProof-of-ConceptNot Defined0.002850.00CVE-2005-2191
11/07/20057.37.3Comersus Open Technologies Comersus Cart Shopping Cart comersus_optaffiliateregistrationexec.asp sql injectionInconnueNot DefinedNot Defined0.001560.03CVE-2005-2190
02/05/20054.34.1Comersus Open Technologies Comersus Cart cross site scriptingInconnueNot DefinedOfficial Fix0.002840.00CVE-2005-1010
02/05/20054.34.3Comersus Open Technologies Comersus Backoffice Lite comersus_supporterror.asp cross site scriptingInconnueNot DefinedNot Defined0.002570.00CVE-2005-0303
02/05/20057.37.3Comersus Open Technologies Comersus Backoffice Lite default.asp sql injectionInconnueNot DefinedNot Defined0.001770.02CVE-2005-0302
02/05/20057.37.3Comersus Open Technologies Comersus Backoffice Lite comersus_backoffice_install10.asp Remote Code ExecutionInconnueNot DefinedNot Defined0.007180.00CVE-2005-0301

1 plus d'entrées ne sont pas affichées

Want to stay up to date on a daily basis?

Enable the mail alert feature now!