Bpowerhouse Luki w zabezpieczeniach

Oś czasu

Rodzaj

Content Management System4
Not Defined2
Blog Software2

Produkt

Bpowerhouse Mini CMS4
BPowerHouse BPHolidayLettings2
Bpowerhouse Mini Blog2

Przeciwdziałanie

Official Fix2
Temporary Fix0
Workaround0
Unavailable2
Not Defined4

Wykorzystywanie

High2
Functional0
Proof-of-Concept6
Unproven0
Not Defined0

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent0
Network8

Uwierzytelnianie

Not Defined0
High0
Low0
None8

Interakcja z użytkownikiem

Not Defined0
Required0
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤88
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤60
≤76
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤88
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k8
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k8
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Affected Products (7): BPGames (1), BPHolidayLettings (1), BPLawyerCaseDocuments (1), BPMusic (1), BPStudents (1), Mini Blog (1), Mini CMS (2)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2010-01-047.37.3Bpowerhouse Mini CMS page.php sql injectionContent Management SystemHighUnavailable0.000640.00CVE-2009-4540
2009-09-307.36.9BPowerHouse BPHolidayLettings search.aspx sql injectionNieznanyProof-of-ConceptNot Defined0.001700.00CVE-2009-3503
2009-09-307.36.9BPowerHouse BPMusic music.php sql injectionNieznanyProof-of-ConceptNot Defined0.001950.02CVE-2009-3502
2009-09-307.36.9BPowerHouse BPGames main.php sql injectionNieznanyProof-of-ConceptNot Defined0.001700.00CVE-2009-3500
2009-09-307.36.9BPowerHouse BPLawyerCaseDocuments employee.aspx sql injectionNieznanyProof-of-ConceptNot Defined0.001950.00CVE-2009-3499
2009-09-227.36.9BPowerHouse BPStudents students.php sql injectionNieznanyProof-of-ConceptNot Defined0.002030.00CVE-2009-3501
2008-12-167.36.4Bpowerhouse Mini Blog index.php directory traversalBlog SoftwareProof-of-ConceptOfficial Fix0.029650.00CVE-2008-5594
2008-12-167.36.9Bpowerhouse Mini CMS index.php directory traversalContent Management SystemProof-of-ConceptNot Defined0.019880.00CVE-2008-5593

◂ PoprzedniPrzeglądKolejny ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!