Ispconfig Vulnerabilidades

Curso de tempo

Versão

3.2.0	2
3.2.1	2
3.1.0	2
3.1.1	2
3.1.2	2

Medidas

Official Fix	7
Temporary Fix	0
Workaround	1
Unavailable	1
Not Defined	1

Explorabilidade

High	0
Functional	0
Proof-of-Concept	5
Unproven	0
Not Defined	5

Tipo de acesso

Not Defined	0
Physical	0
Local	1
Adjacent	1
Network	8

Autenticação

Not Defined	0
High	0
Low	6
None	4

Actividade do utilizador

Not Defined	0
Required	2
None	8

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	0
≤7	4
≤8	3
≤9	1
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	1
≤7	5
≤8	1
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	2
≤7	3
≤8	3
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	2
≤9	1
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fabricante

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explorar 0 dia

<1k	1
<2k	6
<5k	3
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explorar hoje

<1k	10
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (32): 2.2.2, 2.2.3, 3.0.5, 3.0.5.1, 3.0.5.2, 3.0.5.3, 3.0.5.4, 3.0.5.4 p6, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.1.7, 3.1.8, 3.1.9, 3.1.11, 3.1.12, 3.1.15p2, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.2.5, 3.2.6, 3.2.7, 3.2.8, 3.2.9, 3.2.11

Publicado em	Base	Temp	Vulnerabilidade	0day	Hoje	Exp	Mas	CTI	CVE
27/10/2023	6.3	6.2	ISPConfig Language File direitos alargados	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-46818
06/01/2021	6.3	6.3	ISPConfig Injecção SQL	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-3021
25/02/2020	8.5	8.4	ISPConfig Injecção SQL	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-9398
04/10/2018	6.5	6.3	ISPConfig Regular Expression direitos alargados	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2018-17984
07/12/2017	7.5	7.2	ISPConfig Cron Job direitos alargados	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2017-17384
16/08/2016	3.5	3.1	ISPConfig database_user_edit.php Stored Roteiro Cruzado de Sítios	$0-$5k	$0-$5k	Proof-of-Concept	Workaround	0.02
15/06/2015	4.3	3.9	ISPConfig users_edit.php Falsificação de Pedido Cross Site	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2015-4119
15/06/2015	6.3	5.7	ISPConfig show_sys_state.php Injecção SQL	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.04	CVE-2015-4118
14/06/2006	7.3	6.9	ISPConfig Installation server.inc.php direitos alargados	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2006-3042
06/05/2006	7.3	6.9	ISPConfig session.inc.php direitos alargados	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.02	CVE-2006-2315

◂ VoltarVisão GeralPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!