dormsystem vulnerabilities and fixes

Recent CVEs affecting dormsystem, with upgrade or downgrade steps. 2 tracked.

dormsystem has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-10-24. Highest priority: CVE-2019-17580 (score 56/100).

• CVE-2019-17581 MEDIUM 6.1 UPGRADE tonyy dormsystem through 1.3 allows DOM XSS.
• CVE-2019-17580 CRITICAL 9.8 UPGRADE tonyy dormsystem through 1.3 allows SQL Injection in admin.php.

FAQ

How do I fix dormsystem vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dormsystem being exploited right now?

None of the tracked dormsystem CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which dormsystem CVE should I patch first?

CVE-2019-17580 currently ranks highest (56/100): tonyy dormsystem through 1.3 allows SQL Injection in admin.php..

← Back to latest CVEs