PatchTheCVEdouble choco latte vulnerabilities and fixes
Recent CVEs affecting double choco latte, with upgrade or downgrade steps. 5 tracked.
Also searched as: doublechocolatte.
double choco latte has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-02. Highest priority: CVE-2005-0887 (score 53/100).
- CVE-2005-0888 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow
- CVE-2005-0887 HIGH 7.5 DOWNGRADE Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary
- CVE-2002-1039 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read
- CVE-2002-1038 MEDIUM 5.0 DOWNGRADE Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote
- CVE-2002-1037 MEDIUM 5.0 DOWNGRADE Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inje
FAQ
How do I fix double choco latte vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is double choco latte being exploited right now?
None of the tracked double choco latte CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which double choco latte CVE should I patch first?
CVE-2005-0887 currently ranks highest (53/100): Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary.