Powerscripts Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined8
Forum Software2

Produkt

Powerscripts PowerClan4
PowerScripts PowerNews2
PowerScripts PowerBook2
Powerscripts PowerPHPBoard2

Przeciwdziałanie

Official Fix2
Temporary Fix0
Workaround0
Unavailable4
Not Defined4

Wykorzystywanie

High2
Functional0
Proof-of-Concept8
Unproven0
Not Defined0

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent0
Network10

Uwierzytelnianie

Not Defined0
High0
Low0
None10

Interakcja z użytkownikiem

Not Defined0
Required0
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤88
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤62
≤78
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤88
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Affected Products (6): Plusmail (1), PowerBook (1), PowerClan (3), PowerDownload (1), PowerNews (2), PowerPHPBoard (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2009-01-017.36.9Powerscripts PowerClan index.php sql injectionNieznanyProof-of-ConceptNot Defined0.000870.00CVE-2009-0707
2009-01-017.37.3PowerScripts PowerNews news.php sql injectionNieznanyHighUnavailable0.000870.00CVE-2009-0705
2008-03-287.36.4PowerScripts PowerBook directory traversalNieznanyProof-of-ConceptUnavailable0.042500.00CVE-2008-1537
2008-03-287.36.4Powerscripts PowerPHPBoard footer.inc.php directory traversalForum SoftwareProof-of-ConceptUnavailable0.047610.00CVE-2008-1534
2008-02-127.36.9PowerScripts PowerNews categories.inc.php directory traversalNieznanyProof-of-ConceptNot Defined0.013130.00CVE-2008-0742
2006-12-225.65.3Powerscripts PowerClan footer.inc.php privilege escalationNieznanyProof-of-ConceptNot Defined0.118140.00CVE-2006-6715
2006-04-187.37.0Powerscripts PowerClan member.php sql injectionNieznanyHighOfficial Fix0.009310.00CVE-2006-1805
2005-06-017.37.3Powerscripts.org PowerDownload pdl_header.inc.php privilege escalationNieznanyNot DefinedNot Defined0.067800.00CVE-2005-1821
2000-01-117.36.9Powerscripts Plusmail Password File privilege escalationNieznanyProof-of-ConceptNot Defined0.054700.00CVE-2000-0074

◂ PoprzedniPrzeglądKolejny ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!