Sourcecodester Employee Management System Luki w zabezpieczeniach

Oś czasu

Wersja

1.013

Przeciwdziałanie

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined16

Wykorzystywanie

High0
Functional0
Proof-of-Concept15
Unproven0
Not Defined1

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent1
Network15

Uwierzytelnianie

Not Defined0
High2
Low11
None3

Interakcja z użytkownikiem

Not Defined0
Required3
None13

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤63
≤73
≤85
≤91
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤52
≤65
≤72
≤85
≤90
≤100

VulDB

≤10
≤20
≤30
≤43
≤53
≤61
≤76
≤83
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤82
≤91
≤104

CNA

≤10
≤20
≤30
≤42
≤53
≤60
≤76
≤83
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k1
<2k15
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k16
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (1): 1.0

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-03-124.74.5SourceCodester Employee Management System add-admin.php privilege escalation$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2024-2394
2024-02-295.55.5SourceCodester Employee Management System POST Request login.php sql injection$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2024-25239
2024-02-256.36.0SourceCodester Employee Management System myprofile.php sql injection$0-$5k$0-$5kProof-of-ConceptNot Defined0.24CVE-2024-1878
2024-02-256.36.0SourceCodester Employee Management System cancel.php sql injection$0-$5k$0-$5kProof-of-ConceptNot Defined0.34CVE-2024-1877
2024-02-257.36.9SourceCodester Employee Management System psubmit.php sql injection$0-$5k$0-$5kProof-of-ConceptNot Defined0.44CVE-2024-1876
2024-02-243.53.3SourceCodester Employee Management System Project Assignment Report assignp.php cross site scripting$0-$5k$0-$5kProof-of-ConceptNot Defined0.53CVE-2024-1871
2024-02-237.37.1SourceCodester Employee Management System login.php sql injection$0-$5k$0-$5kProof-of-ConceptNot Defined0.15CVE-2024-1833
2024-01-295.85.7SourceCodester Employee Management System Leave delete-leave.php privilege escalation$0-$5k$0-$5kProof-of-ConceptNot Defined0.15CVE-2024-1011
2024-01-294.14.1SourceCodester Employee Management System edit-profile.php cross site scripting$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2024-1010
2024-01-298.17.9SourceCodester Employee Management System login.php sql injection$0-$5k$0-$5kProof-of-ConceptNot Defined0.10CVE-2024-1009

6 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Sourcecodester

Interested in the pricing of exploits?

See the underground prices here!