biborb vulnerabilities and fixes
Recent CVEs affecting biborb, with upgrade or downgrade steps. 4 tracked.
biborb has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-02. Highest priority: CVE-2005-0252 (score 51/100).
- CVE-2005-0254 LOW 3.7 DOWNGRADE BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF an
- CVE-2005-0253 MEDIUM 4.0 DOWNGRADE Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote
- CVE-2005-0252 HIGH 7.5 DOWNGRADE SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute
- CVE-2005-0251 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allo
FAQ
How do I fix biborb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is biborb being exploited right now?
None of the tracked biborb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which biborb CVE should I patch first?
CVE-2005-0252 currently ranks highest (51/100): SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute.