Cactusoft Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined10

Produkt

Cactusoft Cactushop4
Cactusoft Parodia2
Cactusoft Cactushop Lite2
CactuSoft Parodia2

Przeciwdziałanie

Official Fix4
Temporary Fix0
Workaround0
Unavailable4
Not Defined2

Wykorzystywanie

High4
Functional0
Proof-of-Concept4
Unproven0
Not Defined2

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent0
Network10

Uwierzytelnianie

Not Defined0
High0
Low0
None10

Interakcja z użytkownikiem

Not Defined0
Required6
None4

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤56
≤60
≤72
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤54
≤60
≤74
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤56
≤60
≤72
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k6
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Affected Products (4): CactuShop (2), Cactushop (4), Cactushop Lite (1), Parodia (3)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2007-06-045.35.3Cactusoft Cactushop Local Privilege EscalationNieznanyNot DefinedNot Defined0.000000.00
2007-06-047.57.2Cactusoft Cactushop privilege escalationNieznanyHighUnavailable0.021760.00CVE-2007-3061
2007-05-214.34.2CactuSoft Parodia cand_login.asp cross site scriptingNieznanyHighUnavailable0.009560.00CVE-2007-2818
2006-11-207.37.1Cactusoft CactuShop prodtype.asp sql injectionNieznanyHighUnavailable0.005760.00CVE-2006-5991
2006-03-066.56.5Cactusoft Parodia agencyprofile.asp information disclosureNieznanyNot DefinedNot Defined0.003120.00CVE-2006-1005
2006-02-284.34.2Cactusoft Parodia agencyprofile.asp cross site scriptingNieznanyHighUnavailable0.004770.00CVE-2006-1004
2004-11-236.56.5Cactusoft Cactushop Lite AddToMailingList privilege escalationNieznanyNot DefinedNot Defined0.006220.00CVE-2004-0260
2004-03-316.36.0Cactusoft CactuShop mailorder.asp sql injectionNieznanyProof-of-ConceptNot Defined0.000000.03
2004-03-314.33.9Cactusoft Cactushop popuplargeimage.asp cross site scriptingNieznanyProof-of-ConceptOfficial Fix0.008670.00CVE-2004-1882
2004-03-317.36.6Cactusoft Cactushop mailorder.asp sql injectionNieznanyProof-of-ConceptOfficial Fix0.010910.00CVE-2004-1881

◂ PoprzedniPrzeglądKolejny ▸

Do you need the next level of professionalism?

Upgrade your account now!