Drupal 漏洞

时间轴

类型

产品

Drupal Content Construction Kit6
Drupal Shindig-Integrator4
Drupal Custom Search module4
Drupal Ubercart Module4
Drupal Views4

修正

Official Fix132
Temporary Fix0
Workaround0
Unavailable8
Not Defined18

易受攻击性

High56
Functional0
Proof-of-Concept44
Unproven12
Not Defined46

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network158

身份验证

Not Defined0
High0
Low52
None106

用户交互

Not Defined0
Required102
None56

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤432
≤562
≤610
≤728
≤820
≤90
≤106

CVSSv3 Temp

≤10
≤20
≤30
≤446
≤552
≤630
≤724
≤80
≤94
≤102

VulDB

≤10
≤20
≤30
≤432
≤560
≤610
≤730
≤820
≤90
≤106

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

CNA

≤12
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k4
<2k102
<5k52
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k158
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (114): Acidfree (1), Administrator (1), Aggregation module (3), Ajax Checklist (2), Archive Module (1), Atom Module (1), BUEditor (1), Bibliography Module (2), BlueMasters (1), Brilliant Gallery (2), CCK comment reference (1), CMS (6), Chatroom Module (2), Comment Mail (1), Comment Upload Module (1), Commons (1), Content Construction Kit (3), Context Form Alteration module (1), Counter module (1), Custom Search module (2), Cvs Management And Tracker (1), Database Administration Module (2), Devel module (1), Doubleclick for Publishers (1), Drupal Pathauto Module (1), Drupal Project Issue Tracking (2), Drupal Pubcookie Module (1), E-Commerce Module (1), E-Publish (2), Easylinks Module (2), Entity API module (1), EveryBlog (4), Extended Tracker (1), FAQ (1), Feature Module (1), Feedapi Mapper (1), Fileshare module (1), Form Mail Module (1), Forward module (1), Header Image (1), Help Tip module (2), Imce Module (2), Internationalization (2), Job Search (1), Link module (1), Link to Us (1), Localization client (2), Localizer (1), LoginToboggan module (2), MAYO (1), Maestro (1), Magic Tabs module (1), Mailhandler (1), Mailsave (1), Mediafield Module (1), Meta Tags Module (1), Modal Frame (1), MySite (1), NewsFlash (1), News Page (1), Nivo Slider (1), Node Clone (1), Node Hierarchy module (1), Nodeaccess Userreference (1), Nodefamily (1), Nodequeue (1), OpenID (1), Organic Groups Menu (1), Organic Groups Module (2), Outline Designer module (1), Paypal Node Module (1), Petition Node module (1), Plus1 (1), Print (5), Print module (1), Professional theme (1), Project (1), Project Issue File Review (1), Project Issue Tracking Module (3), Project Issue Tracking module (2), Project issue tracking module (1), Protected Node module (1), Quiz (1), Randomizer (1), Search Keyword Module (1), Secure Site Module (2), Semantically Interconnected Online Communities (1), Services Module For Drupal (1), Shindig-Integrator (3), Shoutbox (1), SimpleCorp (1), Site Profile Directory Module (1), Skeleton theme (1), Stock Module (1), Suggested Terms module (1), Talk (2), Tasklist (1), Taxonomy Autotagger module (2), Taxonomy Image module (1), Taxonomy Theme module (1), Taxonomy manager (1), Tinytax Taxonomy Block Module (1), TrailScout module (2), Tribune (1), Ubercart Module (3), User Karma module (2), Userpoints Module (1), Userreview module (1), Views (2), Views Bulk Operations (1), Webform Module (1), Workflow (1), Zen (1), linkchecker (1)

Link to Vendor Website: https://www.drupal.org/

已发布BaseTemp漏洞Prod修正EPSSCTICVE
2018-04-105.45.1Drupal Entity API module Access Restriction 权限升级Content Management SystemNot DefinedOfficial Fix0.002240.00CVE-2014-1400
2017-08-168.07.7Drupal CMS 权限升级Content Management SystemNot DefinedOfficial Fix0.010900.02CVE-2017-6925
2017-08-164.64.5Drupal CMS REST API 权限升级Content Management SystemNot DefinedOfficial Fix0.009530.03CVE-2017-6924
2017-08-164.34.2Drupal CMS Ajax Endpoint 权限升级Content Management SystemNot DefinedOfficial Fix0.001550.00CVE-2017-6923
2015-04-214.34.1Drupal Administrator 跨网站请求伪造Content Management SystemNot DefinedOfficial Fix0.001600.00CVE-2015-3351
2014-11-124.34.1Drupal Organic Groups Menu Administration Page 权限升级Content Management SystemNot DefinedOfficial Fix0.001200.00CVE-2014-8734
2014-10-164.34.0Drupal Modal Frame 跨网站脚本Content Management SystemHighOfficial Fix0.002200.02CVE-2014-8296
2014-10-144.34.1Drupal Project Issue File Review 跨网站脚本Feedback SoftwareNot DefinedOfficial Fix0.001400.00CVE-2014-8765
2014-10-133.53.4Drupal Doubleclick for Publishers 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.000820.00CVE-2014-8748
2014-10-134.34.1Drupal Commons Commons Module 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.002650.00CVE-2014-8747
2014-10-133.53.4Drupal Skeleton theme 跨网站脚本Content Management SystemHighOfficial Fix0.001020.00CVE-2014-8746
2014-10-133.53.4Drupal Custom Search module Search Module 跨网站脚本Content Management SystemHighOfficial Fix0.001110.00CVE-2014-8745
2014-10-133.53.4Drupal Nivo Slider 跨网站脚本Content Management SystemHighOfficial Fix0.001110.02CVE-2014-8744
2014-10-133.53.4Drupal Maestro 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.001110.02CVE-2014-8743
2014-10-093.53.4Drupal MAYO MAYO Theme 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.001160.00CVE-2014-8079
2014-10-093.53.4Drupal Print 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.001160.00CVE-2014-8078
2014-10-093.53.4Drupal NewsFlash 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.001160.00CVE-2014-8077
2014-10-093.53.4Drupal Professional theme 跨网站脚本Content Management SystemHighOfficial Fix0.001020.00CVE-2014-8076
2014-10-093.53.5Drupal Tribune 跨网站脚本Content Management SystemNot DefinedNot Defined0.001200.00CVE-2014-8075
2014-10-083.53.4Drupal Zen template.php 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.000890.00CVE-2014-7980
2014-10-083.53.4Drupal SimpleCorp 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.001110.00CVE-2014-7979
2014-10-083.53.4Drupal BlueMasters 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.001110.00CVE-2014-7978
2014-10-063.53.4Drupal Custom Search module Search Module 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.000820.00CVE-2014-7870
2014-10-063.53.4Drupal Context Form Alteration module 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.000820.00CVE-2014-7869
2012-09-254.34.1Drupal FAQ 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.003410.02CVE-2012-1646

133 更多条目未显示

Interested in the pricing of exploits?

See the underground prices here!