auditor website project vulnerabilities and fixes

Recent CVEs affecting auditor website project, with upgrade or downgrade steps. 6 tracked.

Also searched as: auditorwebsiteproject.

auditor website project has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-06-06. Highest priority: CVE-2018-20637 (score 47/100).

• CVE-2019-7553 MEDIUM 5.4 MITIGATE PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via th
• CVE-2018-20638 MEDIUM 6.5 MITIGATE PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for
• CVE-2018-20637 MEDIUM 6.5 MITIGATE PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of ser
• CVE-2018-20636 MEDIUM 5.4 MITIGATE PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.
• CVE-2018-15186 HIGH 8.8 MITIGATE PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php.
• CVE-2018-13256 MEDIUM 6.1 MITIGATE PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter.

FAQ

How do I fix auditor website project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is auditor website project being exploited right now?

None of the tracked auditor website project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which auditor website project CVE should I patch first?

CVE-2018-20637 currently ranks highest (47/100): PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of ser.

RSS feed for auditor website project · ← Back to latest CVEs