Textpattern 漏洞

时间轴

版本

4.8.4	5
4.0.5	4
4.8.0	3
4.8.1	3
4.8.2	3

修正

Official Fix	2
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	17

易受攻击性

High	0
Functional	0
Proof-of-Concept	7
Unproven	0
Not Defined	12

访问向量

Not Defined	0
Physical	0
Local	0
Adjacent	3
Network	16

身份验证

Not Defined	0
High	0
Low	7
None	12

用户交互

Not Defined	0
Required	9
None	10

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	4
≤7	2
≤8	5
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	3
≤5	6
≤6	3
≤7	4
≤8	3
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	3
≤5	6
≤6	5
≤7	1
≤8	4
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	0
≤7	0
≤8	1
≤9	2
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

供应商

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

零日攻击

<1k	5
<2k	9
<5k	5
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

本日攻击

<1k	17
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

攻击市场容量

🔴 CTI 活动

Affected Versions (27): 1.19, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.8, 4.2, 4.4.1, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.6.2, 4.7.3, 4.8, 4.8.1, 4.8.2, 4.8.3, 4.8.4, 4.8.5, 4.8.6, 4.8.7, 4.8.8

已发布	Base	Temp	漏洞	0day	今天	易	修正	CTI	CVE
2023-04-29	7.5	7.4	Textpattern ZIP File 权限升级	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-24269
2023-04-12	5.5	5.5	Textpattern Upload Plugin 权限升级	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-26852
2022-06-15	3.5	3.5	Textpattern Body 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-40658
2022-03-30	4.3	4.1	Textpattern File Upload index.php 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-44082
2021-06-22	5.5	5.5	Textpattern txp_file.php file_insert 权限升级	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-19510
2021-04-16	8.0	8.0	Textpattern Plug-In 权限升级	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-30209
2021-01-27	4.1	4.1	Textpattern 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-35854
2020-12-02	6.5	6.5	Textpattern CMS prefs Subsystem 跨网站请求伪造	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2020-29458
2018-03-13	6.4	6.4	Textpattern Import XML XML External Entity	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-1000090
2014-10-10	4.3	4.1	Textpattern 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-4737

9 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 9 results.

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!