PatchTheCVEcorenews vulnerabilities and fixes
Recent CVEs affecting corenews, with upgrade or downgrade steps. 3 tracked.
corenews has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-04-26. Highest priority: CVE-2006-1212 (score 54/100).
- CVE-2006-2033 MEDIUM 6.4 DOWNGRADE PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users t
- CVE-2006-2032 MEDIUM 6.4 UPGRADE Multiple SQL injection vulnerabilities in Core CoreNews 2.0.1 and earlier allow remote attackers to execute ar
- CVE-2006-1212 HIGH 7.5 DOWNGRADE Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary com
FAQ
How do I fix corenews vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is corenews being exploited right now?
None of the tracked corenews CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which corenews CVE should I patch first?
CVE-2006-1212 currently ranks highest (54/100): Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary com.