PatchTheCVEdomphp vulnerabilities and fixes
Recent CVEs affecting domphp, with upgrade or downgrade steps. 2 tracked.
domphp has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2015-01-13. Highest priority: CVE-2014-10037 (score 56/100).
- CVE-2014-10038 HIGH 7.5 UPGRADE SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to exec
- CVE-2014-10037 HIGH 7.5 UPGRADE Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impac
FAQ
How do I fix domphp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is domphp being exploited right now?
None of the tracked domphp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which domphp CVE should I patch first?
CVE-2014-10037 currently ranks highest (56/100): Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impac.