PatchTheCVEcedric email reader vulnerabilities and fixes
Recent CVEs affecting cedric email reader, with upgrade or downgrade steps. 2 tracked.
Also searched as: cedricemailreader.
cedric email reader has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2003-12-31. Highest priority: CVE-2003-1411 (score 50/100).
- CVE-2003-1411 MEDIUM 6.8 DOWNGRADE PHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric Email Reader 0.4
- CVE-2003-1410 MEDIUM 6.8 DOWNGRADE PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2 and 0.3 allow
FAQ
How do I fix cedric email reader vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cedric email reader being exploited right now?
None of the tracked cedric email reader CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cedric email reader CVE should I patch first?
CVE-2003-1411 currently ranks highest (50/100): PHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric Email Reader 0.4.