PatchTheCVEdmcms vulnerabilities and fixes
Recent CVEs affecting dmcms, with upgrade or downgrade steps. 4 tracked.
dmcms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-08-20. Highest priority: CVE-2008-3721 (score 52/100).
- CVE-2008-3721 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in user_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attacke
- CVE-2008-3720 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitr
- CVE-2007-5679 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute ar
- CVE-2007-2214 HIGH 7.5 MITIGATE Unrestricted file upload vulnerability in includes/upload_file.php in DmCMS allows remote attackers to upload
FAQ
How do I fix dmcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dmcms being exploited right now?
None of the tracked dmcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dmcms CVE should I patch first?
CVE-2008-3721 currently ranks highest (52/100): PHP remote file inclusion vulnerability in user_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attacke.