article publisher pro vulnerabilities and fixes
Recent CVEs affecting article publisher pro, with upgrade or downgrade steps. 3 tracked.
Also searched as: articlepublisherpro.
article publisher pro has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-11-04. Highest priority: CVE-2006-1852 (score 48/100).
- CVE-2008-4902 HIGH 7.5 DOWNGRADE SQL injection vulnerability in contact_author.php in Article Publisher Pro 1.5 allows remote attackers to exec
- CVE-2008-4901 HIGH 7.5 DOWNGRADE SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute
- CVE-2006-1852 HIGH 7.5 UPGRADE SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers
FAQ
How do I fix article publisher pro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is article publisher pro being exploited right now?
None of the tracked article publisher pro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which article publisher pro CVE should I patch first?
CVE-2006-1852 currently ranks highest (48/100): SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers.