Dcscripts Vulnerabilità

Sequenza temporale

Genere

Forum Software8
Not Defined2

Prodotto

DCscripts DCForum4
DCscripts DCshop2
Dcscripts DCForum2
DCScripts DCForumLite2

Contromisure

Official Fix0
Temporary Fix0
Workaround4
Unavailable2
Not Defined4

Sfruttabilità

High0
Functional0
Proof-of-Concept8
Unproven0
Not Defined2

Accesso al vettore

Not Defined0
Physical0
Local0
Adjacent0
Network10

Autenticazione

Not Defined0
High0
Low0
None10

Interazione dell'utente

Not Defined0
Required2
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤62
≤72
≤82
≤90
≤102

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤54
≤60
≤74
≤80
≤92
≤100

VulDB

≤10
≤20
≤30
≤40
≤52
≤62
≤72
≤82
≤90
≤102

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k0
<2k4
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (4): DCForum (5), DCForumLite (2), DCshop (1), Dcshop (1)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
25/04/20065.35.0DCScripts DCForumLite dcboard.cgi sql injectionForum SoftwareProof-of-ConceptUnavailable0.006000.00CVE-2006-2050
25/04/20064.34.1DCScripts DCForumLite dcboard.cgi cross site scriptingForum SoftwareProof-of-ConceptUnavailable0.010150.00CVE-2006-2049
16/12/20054.34.1DCscripts DCForum dcboard.php cross site scriptingForum SoftwareProof-of-ConceptNot Defined0.002650.00CVE-2005-4311
31/03/20037.36.9DCscripts DCForum Perl Handler_ dcboard.cgi directory traversalForum SoftwareProof-of-ConceptNot Defined0.245850.00CVE-2001-0436
12/08/20026.56.5DCscripts DCshop Null Byte dcshop.cgi denial of serviceSconosciutoNot DefinedNot Defined0.007790.00CVE-2002-0492
31/01/20027.36.7Dcscripts DCForum Password Generator retrieve_password.pl autenticazione deboleForum SoftwareProof-of-ConceptWorkaround0.012540.00CVE-2002-0226
06/12/20015.35.2Dcscripts Dcshop HTTP GET Request auth_user_file.txt Password rivelazione di un 'informazioneSconosciutoNot DefinedWorkaround0.007550.02CVE-2001-0821
02/07/20015.35.3DCscripts DCForum upload_file.pl escalazione di privilegiForum SoftwareNot DefinedNot Defined0.009490.00CVE-2001-0437
15/05/20019.89.0DCscripts DCForum Registration Database dcboard.cgi escalazione di privilegiForum SoftwareProof-of-ConceptWorkaround0.035920.00CVE-2001-0527

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!