Tincan Phplist Luki w zabezpieczeniach

Oś czasu

Wersja

2.10.1	12
2.8.12	8
2.10.2	8
2.6	6
2.6.1	6

Przeciwdziałanie

Official Fix	10
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	4

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	10
Unproven	2
Not Defined	2

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	14

Uwierzytelnianie

Not Defined	0
High	0
Low	2
None	12

Interakcja z użytkownikiem

Not Defined	0
Required	8
None	6

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	2
≤7	4
≤8	2
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	4
≤7	2
≤8	0
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	2
≤7	4
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	2
<2k	8
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	14
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

Affected Versions (27): 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.9.1, 2.6, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.7.1, 2.7.2, 2.8.2, 2.8.7, 2.8.12, 2.9.3, 2.9.4, 2.9.5, 2.10.1, 2.10.2

Typ oprogramowania: Mailing List Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CVE
2012-10-01	4.3	3.9	Tincan PHPList cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	CVE-2012-5228
2011-04-13	4.3	4.3	Tincan PHPList cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	CVE-2011-1682
2011-04-13	6.3	5.7	Tincan PHPList Administrator Account cross site request forgery	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	CVE-2011-0748
2009-02-04	7.3	6.6	Tincan PHPList privilege escalation	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	CVE-2009-0422
2009-01-12	5.3	5.1	Tincan PHPList privilege escalation	$0-$5k	$0-$5k	High	Official Fix	CVE-2008-5887
2006-10-17	7.3	6.4	Tincan PHPList sql injection	$0-$5k	$0-$5k	Unproven	Official Fix	CVE-2006-5322
2006-10-17	4.3	4.1	Tincan PHPList cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2006-5321
2006-10-16	4.3	3.9	Tincan PHPList index.php cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	CVE-2006-5294
2006-04-12	5.3	4.8	Tincan PHPList directory traversal	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	CVE-2006-1746
2005-11-07	5.3	5.0	Tincan PHPList defaults.php directory traversal	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	CVE-2005-3557

4 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 4 results.

więcej wpisów autorstwa Tincan

◂ PoprzedniPrzeglądKolejny ▸

Do you need the next level of professionalism?

Upgrade your account now!