Expinion Vulnerabilità

Sequenza temporale

Genere

Not Defined4
Calendar Software2
Survey Software2

Prodotto

Expinion.net Member Management System2
Expinion.net MultiCalendars2
Expinion.net Inews Publisher2
Expinion Poll Pro2

Contromisure

Official Fix0
Temporary Fix0
Workaround0
Unavailable4
Not Defined4

Sfruttabilità

High4
Functional0
Proof-of-Concept0
Unproven0
Not Defined4

Accesso al vettore

Not Defined0
Physical0
Local0
Adjacent0
Network8

Autenticazione

Not Defined0
High0
Low0
None8

Interazione dell'utente

Not Defined0
Required6
None2

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤60
≤74
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤60
≤74
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤52
≤60
≤74
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k0
<2k6
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k8
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (6): Inews Publisher (1), Member Management System (1), MultiCalendars (2), News Manager Lite (2), Poll Pro (1), iNews Publisher (1)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
09/09/20104.34.3Expinion.net Member Management System index.asp cross site scriptingSconosciutoNot DefinedNot Defined0.002540.00CVE-2010-4896
09/01/20096.36.1Expinion Poll Pro cross site request forgerySurvey SoftwareHighUnavailable0.003080.00CVE-2009-0112
04/12/20066.36.1Expinion.net Inews Publisher articles.asp cross site scriptingSconosciutoHighUnavailable0.004180.00CVE-2006-6274
30/11/20066.36.0Expinion.net iNews Publisher articles.asp cross site scriptingSconosciutoProof-of-ConceptNot Defined0.005280.00CVE-2006-6180
20/11/20067.37.3Expinion.net MultiCalendars rss_out.asp sql injectionCalendar SoftwareNot DefinedNot Defined0.002180.00CVE-2006-5977
09/05/20066.55.9Expinion.net MultiCalendars all_calendars.asp sql injectionCalendar SoftwareProof-of-ConceptOfficial Fix0.006520.00CVE-2006-2293
22/03/20044.33.8Expinion.net News Manager Lite comment_add.asp cross site scriptingSconosciutoUnprovenOfficial Fix0.006070.02CVE-2004-1845
22/03/20047.36.4Expinion.net News Manager Lite more.asp sql injectionSconosciutoUnprovenOfficial Fix0.006820.00CVE-2004-1846

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!