PatchTheCVEdragonfly cms vulnerabilities and fixes
Recent CVEs affecting dragonfly cms, with upgrade or downgrade steps. 4 tracked.
Also searched as: dragonflycms.
dragonfly cms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-08-16. Highest priority: CVE-2006-0644 (score 55/100).
- CVE-2006-4162 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to injec
- CVE-2006-1033 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to
- CVE-2006-0726 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attack
- CVE-2006-0644 HIGH 7.5 DOWNGRADE Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS (aka CPG Dragonfly CMS)
FAQ
How do I fix dragonfly cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dragonfly cms being exploited right now?
None of the tracked dragonfly cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dragonfly cms CVE should I patch first?
CVE-2006-0644 currently ranks highest (55/100): Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS (aka CPG Dragonfly CMS) .