PatchTheCVEar-blog vulnerabilities and fixes
Recent CVEs affecting ar-blog, with upgrade or downgrade steps. 4 tracked.
Also searched as: ar blog.
ar-blog has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2006-06-05. Highest priority: CVE-2005-3495 (score 45/100).
- CVE-2006-2809 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in index.php in ar-blog 5.2 allow remote attackers to inje
- CVE-2006-0333 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script
- CVE-2005-3495 HIGH 7.5 UPGRADE Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies.
- CVE-2005-3494 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in Ar-blog 5.2 and earlier allows remote attackers to inject arbitrar
FAQ
How do I fix ar-blog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ar-blog being exploited right now?
None of the tracked ar-blog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ar-blog CVE should I patch first?
CVE-2005-3495 currently ranks highest (45/100): Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies..