Photopost Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

PhotoPost PHP Pro10
Photopost ReviewPost PHP Pro4
PhotoPost PhotoPost PHP Pro4
Photopost PhotoPost PHP Pro4
PhotoPost PhotoPost vBGallery2

Przeciwdziałanie

Official Fix18
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

Wykorzystywanie

High0
Functional0
Proof-of-Concept12
Unproven4
Not Defined8

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent0
Network24

Uwierzytelnianie

Not Defined0
High0
Low2
None22

Interakcja z użytkownikiem

Not Defined0
Required10
None14

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤58
≤60
≤70
≤810
≤90
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤46
≤54
≤60
≤710
≤80
≤92
≤102

VulDB

≤10
≤20
≤30
≤42
≤58
≤60
≤70
≤810
≤90
≤104

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k10
<5k14
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k24
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (4): PHP Pro (11), PhotoPost PHP Pro (7), PhotoPost vBGallery (2), ReviewPost PHP Pro (3)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2009-08-266.35.8PhotoPost PhotoPost vBGallery File Upload upload.php privilege escalationPhoto Gallery SoftwareProof-of-ConceptUnavailable0.005460.04CVE-2008-7088
2008-01-1110.08.7PhotoPost PhotoPost vBGallery File Upload privilege escalationPhoto Gallery SoftwareUnprovenOfficial Fix0.006940.00CVE-2008-0251
2006-09-187.36.9PhotoPost PHP Pro addfav.php privilege escalationProgramming Language SoftwareProof-of-ConceptNot Defined0.133150.00CVE-2006-4990
2006-09-157.36.4PhotoPost PHP Pro zipndownload.php privilege escalationProgramming Language SoftwareUnprovenOfficial Fix0.051090.02CVE-2006-4828
2005-08-304.34.3PhotoPost PHP Pro cross site scriptingProgramming Language SoftwareNot DefinedNot Defined0.008310.00CVE-2005-2737
2005-05-137.36.6Photopost PHP Pro member.php sql injectionProgramming Language SoftwareProof-of-ConceptOfficial Fix0.003860.00CVE-2005-1629
2005-05-024.34.1PhotoPost PhotoPost PHP Pro cross site scriptingProgramming Language SoftwareNot DefinedOfficial Fix0.006550.00CVE-2005-0778
2005-05-024.34.1PhotoPost PhotoPost PHP Pro check_tags cross site scriptingProgramming Language SoftwareNot DefinedOfficial Fix0.002840.00CVE-2005-0777
2005-05-024.34.1PhotoPost PhotoPost PHP Pro adm-photo.php cross site scriptingProgramming Language SoftwareNot DefinedOfficial Fix0.021400.00CVE-2005-0776
2005-05-026.36.0PhotoPost PhotoPost PHP Pro Logging misc.php cross site scriptingProgramming Language SoftwareNot DefinedOfficial Fix0.010750.00CVE-2005-0775

13 więcej wpisów nie jest pokazywanych

Do you know our Splunk app?

Download it now for free!