Joomla Cms 漏洞

时间轴

版本

3.9.053
3.9.153
3.9.249
3.9.343
3.9.439

修正

Official Fix215
Temporary Fix0
Workaround0
Unavailable6
Not Defined87

易受攻击性

High21
Functional0
Proof-of-Concept63
Unproven7
Not Defined217

访问向量

Not Defined0
Physical0
Local11
Adjacent0
Network297

身份验证

Not Defined0
High1
Low84
None223

用户交互

Not Defined0
Required111
None197

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤427
≤542
≤685
≤766
≤867
≤915
≤106

CVSSv3 Temp

≤10
≤20
≤30
≤435
≤569
≤664
≤794
≤827
≤916
≤103

VulDB

≤10
≤20
≤31
≤429
≤575
≤653
≤767
≤873
≤93
≤107

NVD

≤10
≤20
≤30
≤41
≤58
≤615
≤737
≤813
≤914
≤1014

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k7
<10k164
<25k135
<50k2
<100k0
≥100k0

本日攻击

<1k255
<2k4
<5k25
<10k23
<25k1
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (205): 1, 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.03, 1.1, 1.2, 1.3, 1.4, 1.5, 1.5 Beta, 1.5 Beta1, 1.5 Beta 2, 1.5 RC1, 1.5 RC3, 1.5.0 Beta, 1.5.0 Beta1, 1.5.0 Beta2, 1.5.0 RC1, 1.5.0 Rc1, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.5.11, 1.5.12, 1.5.13, 1.5.14, 1.5.15, 1.5.16, 1.5.17, 1.5.18, 1.5.19, 1.5.21, 1.5.22, 1.5.23, 1.5.24, 1.5.25, 1.5.26, 1.5rc3, 1.5rc4, 1.6, 1.6.1, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.5.9, 2.5.11, 2.5.12, 2.5.13, 2.5.14, 2.5.15, 2.5.16, 2.5.17, 2.5.18, 2.5.19, 2.5.21, 2.5.22, 2.5.23, 2.5.24, 2.5.25, 3, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.2.5, 3.2.6, 3.2.7, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6, 3.4, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5, 3.4.6, 3.4.7, 3.4.8, 3.5, 3.5.1, 3.6, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.7, 3.7.1, 3.7.2, 3.7.3, 3.7.4, 3.7.5, 3.8, 3.8.1, 3.8.2, 3.8.3, 3.8.4, 3.8.5, 3.8.6, 3.8.7, 3.8.8, 3.8.9, 3.8.11, 3.8.12, 3.9, 3.9.1, 3.9.2, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 3.9.8, 3.9.9, 3.9.11, 3.9.12, 3.9.13, 3.9.14, 3.9.15, 3.9.16, 3.9.17, 3.9.18, 3.9.19, 3.9.21, 3.9.22, 3.9.23, 3.9.24, 3.9.25, 3.9.26, 3.10.1, 3.10.2, 3.10.3, 3.10.4, 3.10.5, 3.10.6, 3.10.7, 3.10.8, 3.10.9, 3.10.11, 3.10.12, 3.10.13, 3.10.14, 4.4, 4.4.1, 4.4.2, 5, 5.0.1, 5.0.2, 2007-01-18

Link to Product Website: https://www.joomla.org/

软件类型: Content Management System

已发布BaseTemp漏洞0day今天修正CTICVE
2024-02-203.53.5Joomla CMS 跨网站脚本$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2024-21726
2024-02-203.53.5Joomla CMS Mail Address 跨网站脚本$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2024-21725
2024-02-203.53.5Joomla CMS Media Selection 跨网站脚本$5k-$25k$0-$5kNot DefinedNot Defined0.02CVE-2024-21724
2024-02-203.53.5Joomla CMS URL Parser Redirect$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2024-21723
2024-02-203.13.1Joomla CMS MFA Management 弱身份验证$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2024-21722
2021-05-263.53.5Joomla CMS Data Download Endpoint 跨网站请求伪造$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2021-26034
2021-05-263.53.5Joomla CMS AJAX Reordering Endpoint 跨网站请求伪造$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2021-26033
2021-05-263.53.5Joomla CMS canUpload 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2021-26032
2020-08-265.24.9Joomla CMS mod_latestactions 跨网站脚本$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-24599
2020-08-266.66.3Joomla CMS com_content Redirect$5k-$25k计算Not DefinedOfficial Fix0.02CVE-2020-24598
2020-07-156.36.3Joomla CMS com_installer 跨网站请求伪造$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2020-15700
2020-07-155.35.3Joomla CMS Validation 弱身份验证$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2020-15699
2020-07-155.35.3Joomla CMS Filter Credentials 信息公开$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2020-15698
2020-07-155.35.3Joomla CMS 权限升级$5k-$25k$5k-$25kNot DefinedNot Defined0.04CVE-2020-15697
2020-07-155.45.4Joomla CMS mod_random_image 跨网站脚本$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2020-15696
2020-07-156.36.3Joomla CMS com_privacy 跨网站请求伪造$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2020-15695
2020-06-025.95.6Joomla CMS Textfilter 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13763
2020-06-025.24.9Joomla CMS com_modules 跨网站脚本$5k-$25k计算Not DefinedOfficial Fix0.00CVE-2020-13762
2020-06-025.24.9Joomla CMS Articles 跨网站脚本$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13761
2020-06-026.56.2Joomla CMS com_postinstall 跨网站请求伪造$5k-$25k计算Not DefinedOfficial Fix0.00CVE-2020-13760
2020-04-216.36.1Joomla CMS com_users 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2020-11891
2020-04-216.36.1Joomla CMS ACL 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-11890
2020-04-215.95.7Joomla CMS com_users 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2020-11889
2020-03-168.58.2Joomla CMS SQL注入$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2020-10243
2020-03-165.24.9Joomla CMS Protostar/Beez3 跨网站脚本$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2020-10242

283 更多条目未显示

更多条目由 Joomla

Might our Artificial Intelligence support you?

Check our Alexa App!