PatchTheCVEalternc vulnerabilities and fixes
Recent CVEs affecting alternc, with upgrade or downgrade steps. 4 tracked.
alternc has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2006-12-04. Highest priority: CVE-2006-6259 (score 63/100).
- CVE-2006-6259 HIGH 10.0 UPGRADE Multiple directory traversal vulnerabilities in (a) class/functions.php and (b) class/m_bro.php in AlternC 0.9
- CVE-2006-6258 HIGH 9.3 UPGRADE The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, whi
- CVE-2006-6257 MEDIUM 6.8 UPGRADE The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attackers to ob
- CVE-2006-6256 MEDIUM 6.8 UPGRADE Cross-site scripting (XSS) vulnerability in the file manager in admin/bro_main.php in AlternC 0.9.5 and earlie
FAQ
How do I fix alternc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is alternc being exploited right now?
None of the tracked alternc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which alternc CVE should I patch first?
CVE-2006-6259 currently ranks highest (63/100): Multiple directory traversal vulnerabilities in (a) class/functions.php and (b) class/m_bro.php in AlternC 0.9.