Kashipara 脆弱性

タイムライン

タイプ

製品

Kashipara Food Management System19
Kashipara Group Job Portal14
Kashipara Group Billing Software8
Kashipara Online Furniture Shopping Ecommerce Webs ...7
Kashipara Group Travel Website6

修復

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined76

悪用可能性

High0
Functional0
Proof-of-Concept35
Unproven0
Not Defined41

アクセスベクター

Not Defined0
Physical0
Local0
Adjacent0
Network76

認証

Not Defined0
High0
Low36
None40

ユーザー操作

Not Defined0
Required11
None65

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤57
≤60
≤715
≤812
≤938
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤57
≤63
≤712
≤814
≤936
≤100

VulDB

≤10
≤20
≤30
≤410
≤51
≤60
≤726
≤839
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤63
≤716
≤82
≤90
≤1011

CNA

≤10
≤20
≤30
≤43
≤50
≤64
≤721
≤84
≤91
≤1036

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k0
<2k76
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

本日のエクスプロイト

<1k39
<2k37
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (10): Billing Software (13), Dynamic Lab Management System (2), Food Management System (19), Hospital Management System (2), Hotel Management (4), Job Portal (14), Online Furniture Shopping Ecommerce Website (7), Online Notice Board System (4), Student Information System (5), Travel Website (6)

公開済みBaseTemp脆弱性Prod修復EPSSCTICVE
2024年04月23日3.53.2Kashipara Online Furniture Shopping Ecommerce Website login.php クロスサイトスクリプティングE-Commerce Management SoftwareProof-of-ConceptNot Defined0.000450.47CVE-2024-4075
2024年04月23日3.53.2Kashipara Online Furniture Shopping Ecommerce Website prodInfo.php クロスサイトスクリプティングE-Commerce Management SoftwareProof-of-ConceptNot Defined0.000450.47CVE-2024-4074
2024年04月23日3.53.2Kashipara Online Furniture Shopping Ecommerce Website prodList.php クロスサイトスクリプティングE-Commerce Management SoftwareProof-of-ConceptNot Defined0.000450.16CVE-2024-4073
2024年04月23日3.53.2Kashipara Online Furniture Shopping Ecommerce Website search.php クロスサイトスクリプティングE-Commerce Management SoftwareProof-of-ConceptNot Defined0.000700.52CVE-2024-4072
2024年04月23日6.35.7Kashipara Online Furniture Shopping Ecommerce Website prodInfo.php SQLインジェクションE-Commerce Management SoftwareProof-of-ConceptNot Defined0.000870.93CVE-2024-4071
2024年04月23日6.35.7Kashipara Online Furniture Shopping Ecommerce Website prodList.php SQLインジェクションE-Commerce Management SoftwareProof-of-ConceptNot Defined0.000450.73CVE-2024-4070
2024年04月23日6.35.7Kashipara Online Furniture Shopping Ecommerce Website search.php SQLインジェクションE-Commerce Management SoftwareProof-of-ConceptNot Defined0.000450.43CVE-2024-4069
2024年01月12日7.57.3Kashipara Billing Software HTTP POST Request item_list_edit.php SQLインジェクションBilling SoftwareProof-of-ConceptNot Defined0.000630.21CVE-2024-0496
2024年01月12日7.57.3Kashipara Billing Software HTTP POST Request party_submit.php SQLインジェクションBilling SoftwareProof-of-ConceptNot Defined0.000630.15CVE-2024-0495
2024年01月12日7.57.3Kashipara Billing Software HTTP POST Request material_bill.php SQLインジェクションBilling SoftwareProof-of-ConceptNot Defined0.000630.05CVE-2024-0494

66 非表示のエントリあり

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!