Zhong Bang 漏洞

时间轴

类型

Not Defined6
E-Commerce Management Software2

产品

Zhong Bang CRMEB5
Zhong Bang CRMEB Java2
Zhong Bang CRMEB Mall System1

修正

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined8

易受攻击性

High0
Functional0
Proof-of-Concept6
Unproven0
Not Defined2

访问向量

Not Defined0
Physical0
Local0
Adjacent2
Network6

身份验证

Not Defined0
High1
Low6
None1

用户交互

Not Defined0
Required1
None7

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤50
≤61
≤72
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤50
≤62
≤72
≤83
≤90
≤100

VulDB

≤10
≤20
≤30
≤41
≤52
≤61
≤74
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤91
≤104

CNA

≤10
≤20
≤30
≤40
≤52
≤60
≤73
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k8
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k7
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (3): CRMEB (5), CRMEB Java (2), CRMEB Mall System (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2023-06-146.16.0Zhong Bang CRMEB PublicController.php put_image 权限升级未知Proof-of-ConceptNot Defined0.000640.04CVE-2023-3234
2023-06-147.16.9Zhong Bang CRMEB PublicController.php get_image_base64 权限升级未知Proof-of-ConceptNot Defined0.000670.04CVE-2023-3233
2023-06-147.57.3Zhong Bang CRMEB Image Upload app_auth 权限升级未知Proof-of-ConceptNot Defined0.000640.05CVE-2023-3232
2023-05-087.67.4Zhong Bang CRMEB SystemAttachmentServices.php 权限升级未知Not DefinedNot Defined0.000880.03CVE-2023-30185
2023-04-285.55.4Zhong Bang CRMEB SystemAttachmentServices.php videoUpload 权限升级未知Proof-of-ConceptNot Defined0.001720.05CVE-2023-2419
2023-03-233.53.2Zhong Bang CRMEB Java save 跨网站脚本E-Commerce Management SoftwareProof-of-ConceptNot Defined0.000600.09CVE-2023-1609
2023-03-237.57.3Zhong Bang CRMEB Java list getAdminList SQL注入E-Commerce Management SoftwareProof-of-ConceptNot Defined0.001340.05CVE-2023-1608
2021-06-306.36.1Zhong Bang CRMEB Mall System SystemDatabackup.php SQL注入未知Not DefinedNot Defined0.000880.00CVE-2020-21394

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!