Toenda Software Development Vulnerabilità

Sequenza temporale

Genere

Not Defined10

Prodotto

Toenda Software Development toendaCMS8
Toenda Software Development ToendaCMS2

Contromisure

Official Fix2
Temporary Fix0
Workaround0
Unavailable0
Not Defined8

Sfruttabilità

High0
Functional0
Proof-of-Concept10
Unproven0
Not Defined0

Accesso al vettore

Not Defined0
Physical0
Local0
Adjacent0
Network10

Autenticazione

Not Defined0
High0
Low0
None10

Interazione dell'utente

Not Defined0
Required4
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤62
≤72
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤54
≤62
≤74
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤52
≤62
≤72
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k0
<2k4
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

Affected Products (2): ToendaCMS (1), toendaCMS (8)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
11/04/20074.34.2Toenda Software Development toendaCMS cross site scriptingSconosciutoHighUnavailable0.006970.00CVE-2007-1872
06/10/20067.36.9Toenda Software Development ToendaCMS index.php escalazione di privilegiSconosciutoProof-of-ConceptNot Defined0.085630.00CVE-2006-4349
07/08/20064.34.1Toenda Software Development toendaCMS toendacms cross site scriptingSconosciutoProof-of-ConceptNot Defined0.006150.00CVE-2006-4016
03/06/20066.36.0Toenda Software Development toendaCMS content_footer.php cross site scriptingSconosciutoProof-of-ConceptNot Defined0.005280.00CVE-2006-2799
20/12/20056.36.0Toenda Software Development toendaCMS File Upload albums buffer overflowSconosciutoNot DefinedOfficial Fix0.003190.00CVE-2005-4422
12/12/20057.36.9Toenda Software Development toendaCMS index.php sql injectionSconosciutoProof-of-ConceptNot Defined0.003220.00CVE-2005-4353
12/12/20054.33.9Toenda Software Development toendaCMS index.php cross site scriptingSconosciutoProof-of-ConceptOfficial Fix0.007170.02CVE-2005-4277
16/11/20055.34.8Toenda Software Development toendaCMS User Account rivelazione di un 'informazioneSconosciutoProof-of-ConceptOfficial Fix0.006280.00CVE-2005-3551
16/11/20055.34.8Toenda Software Development toendaCMS admin.php directory traversalSconosciutoProof-of-ConceptOfficial Fix0.013870.00CVE-2005-3550

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Interested in the pricing of exploits?

See the underground prices here!