Sourcecodester Human Resource Management System 漏洞

时间轴

版本

1.010

修正

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined14

易受攻击性

High0
Functional0
Proof-of-Concept12
Unproven0
Not Defined2

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network14

身份验证

Not Defined0
High1
Low12
None1

用户交互

Not Defined0
Required3
None11

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤53
≤63
≤72
≤85
≤91
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤51
≤64
≤73
≤84
≤90
≤100

VulDB

≤10
≤20
≤30
≤43
≤51
≤60
≤79
≤81
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤52
≤62
≤72
≤81
≤92
≤104

CNA

≤10
≤20
≤30
≤43
≤51
≤60
≤77
≤81
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k2
<2k9
<5k3
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k13
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (1): 1.0

已发布BaseTemp漏洞0day今天修正CTICVE
2023-06-237.57.3SourceCodester Human Resource Management System detailview.php SQL注入$0-$5k$0-$5kProof-of-ConceptNot Defined0.17CVE-2023-3391
2022-12-034.44.3SourceCodester Human Resource Management System employeeview.php 跨网站脚本$0-$5k$0-$5kProof-of-ConceptNot Defined0.05CVE-2022-4279
2022-12-035.55.4SourceCodester Human Resource Management System employeeadd.php SQL注入$0-$5k$0-$5kProof-of-ConceptNot Defined0.04CVE-2022-4278
2022-12-038.17.9SourceCodester Human Resource Management System Content-Type employee.php 权限升级$0-$5k$0-$5kProof-of-ConceptNot Defined0.04CVE-2022-4273
2022-11-168.07.9SourceCodester Human Resource Management System login.php SQL注入$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-43262
2022-10-134.14.0SourceCodester Human Resource Management System Master List 跨网站脚本$0-$5k$0-$5kProof-of-ConceptNot Defined0.05CVE-2022-3497
2022-10-137.16.9SourceCodester Human Resource Management System Admin Panel employeeadd.php 权限升级$0-$5k$0-$5kProof-of-ConceptNot Defined0.04CVE-2022-3496
2022-10-134.14.0SourceCodester Human Resource Management System Add Employee 跨网站脚本$0-$5k$0-$5kProof-of-ConceptNot Defined0.04CVE-2022-3493
2022-10-137.16.9SourceCodester Human Resource Management System Profile Photo 权限升级$0-$5k$0-$5kProof-of-ConceptNot Defined0.04CVE-2022-3492
2022-10-126.46.2SourceCodester Human Resource Management System getstatecity.php SQL注入$0-$5k$0-$5kProof-of-ConceptNot Defined0.09CVE-2022-3473

4 更多条目未显示

更多条目由 Sourcecodester

Do you know our Splunk app?

Download it now for free!