Tecrail Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Tecrail Responsive FileManager10

Przeciwdziałanie

Official Fix2
Temporary Fix0
Workaround0
Unavailable0
Not Defined8

Wykorzystywanie

High0
Functional0
Proof-of-Concept6
Unproven0
Not Defined4

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent2
Network8

Uwierzytelnianie

Not Defined0
High0
Low2
None8

Interakcja z użytkownikiem

Not Defined0
Required2
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤62
≤74
≤82
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤62
≤74
≤80
≤92
≤100

VulDB

≤10
≤20
≤30
≤40
≤52
≤64
≤72
≤80
≤92
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤84
≤94
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k2
<2k8
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (2): Responsive FileManager (9), Responsive Filemanger (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2023-02-027.17.0Tecrail Responsive FileManager File Extension Check privilege escalationNieznanyNot DefinedOfficial Fix0.002840.00CVE-2022-46604
2019-02-256.45.8Tecrail Responsive FileManager ajax_calls.php directory traversalNieznanyProof-of-ConceptNot Defined0.044580.00CVE-2018-20795
2019-02-257.06.3Tecrail Responsive FileManager ajax_calls.php save_img directory traversalNieznanyProof-of-ConceptNot Defined0.004960.00CVE-2018-20794
2019-02-257.06.3Tecrail Responsive FileManager execute.php create_file directory traversalNieznanyProof-of-ConceptNot Defined0.004440.00CVE-2018-20793
2019-02-256.45.8Tecrail Responsive FileManager ajax_calls.php get_file directory traversalNieznanyProof-of-ConceptNot Defined0.044580.00CVE-2018-20792
2019-02-255.24.7Tecrail Responsive FileManager Media File Upload media_preview cross site scriptingNieznanyProof-of-ConceptNot Defined0.001310.00CVE-2018-20791
2019-02-257.06.3Tecrail Responsive FileManager execute.php delete_file directory traversalNieznanyProof-of-ConceptNot Defined0.004440.00CVE-2018-20790
2019-02-257.06.3Tecrail Responsive FileManager execute.php delete_folder directory traversalNieznanyProof-of-ConceptNot Defined0.004440.00CVE-2018-20789
2018-10-308.48.4Tecrail Responsive FileManager Incomplete Fix upload.php privilege escalationNieznanyNot DefinedNot Defined0.004840.00CVE-2018-18867
2017-02-087.57.3Tecrail Responsive Filemanger directory traversalNieznanyProof-of-ConceptOfficial Fix0.001910.09CVE-2017-20145

Interested in the pricing of exploits?

See the underground prices here!