Simple Machines Luki w zabezpieczeniach

Oś czasu

Rodzaj

Forum Software23
Not Defined6
E-Commerce Management Software1

Produkt

Simple Machines Forum22
Simple Machines SMF4
Simple Machines OpenCart1
Simple Machines Smf Shoutbox1
Simple Machines Simple Machines Smf1

Przeciwdziałanie

Official Fix9
Temporary Fix0
Workaround0
Unavailable10
Not Defined11

Wykorzystywanie

High7
Functional1
Proof-of-Concept5
Unproven3
Not Defined14

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent0
Network30

Uwierzytelnianie

Not Defined0
High0
Low3
None27

Interakcja z użytkownikiem

Not Defined0
Required11
None19

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤59
≤63
≤75
≤811
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤59
≤66
≤79
≤84
≤92
≤100

VulDB

≤10
≤20
≤30
≤40
≤59
≤63
≤75
≤813
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k16
<5k14
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k30
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (6): Forum (22), Forum SMF (1), OpenCart (1), SMF (4), Simple Machines Smf (1), Smf Shoutbox (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2020-03-208.58.4Simple Machines Forum Subs-Package.php privilege escalationForum SoftwareNot DefinedOfficial Fix0.002440.04CVE-2019-11574
2018-04-248.58.2Simple Machines Forum Access Restriction PersonalMessage.php MessageSearch2 privilege escalationForum SoftwareNot DefinedOfficial Fix0.001820.00CVE-2018-10305
2012-11-174.34.3Simple Machines SMF index.php cross site scriptingNieznanyNot DefinedNot Defined0.002210.00CVE-2012-5903
2009-04-217.37.3Simple Machines Forum Load.php PHP sql injectionForum SoftwareHighUnavailable0.000640.00CVE-2008-6741
2008-11-055.45.1Simple Machines Forum index.php directory traversalForum SoftwareProof-of-ConceptNot Defined0.018130.00CVE-2008-6659
2008-11-054.34.1Simple Machines Forum index.php directory traversalForum SoftwareProof-of-ConceptNot Defined0.001910.00CVE-2008-6658
2008-11-056.36.0Simple Machines Forum index.php cross site request forgeryForum SoftwareHighOfficial Fix0.007100.00CVE-2008-6657
2008-07-104.34.2Simple Machines OpenCart index.php cross site scriptingE-Commerce Management SoftwareHighUnavailable0.001920.00CVE-2008-3130
2008-07-086.36.0Simple Machines Forum cross site scriptingForum SoftwareNot DefinedOfficial Fix0.002430.00CVE-2008-3073
2008-07-087.37.0Simple Machines Forum Random Number Generator Remote Code ExecutionForum SoftwareNot DefinedOfficial Fix0.002440.00CVE-2008-3072

20 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 20 results.

◂ PoprzedniPrzeglądKolejny ▸

Might our Artificial Intelligence support you?

Check our Alexa App!