PatchTheCVEbotbr vulnerabilities and fixes
Recent CVEs affecting botbr, with upgrade or downgrade steps. 3 tracked.
botbr has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2003-12-31. Highest priority: CVE-2003-1405 (score 54/100).
- CVE-2003-1405 HIGH 7.5 DOWNGRADE DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1) exec.php3 o
- CVE-2003-1404 HIGH 7.5 DOWNGRADE DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote
- CVE-2003-1403 HIGH 7.5 DOWNGRADE foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which call
FAQ
How do I fix botbr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is botbr being exploited right now?
None of the tracked botbr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which botbr CVE should I patch first?
CVE-2003-1405 currently ranks highest (54/100): DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1) exec.php3 o.