PatchTheCVEdragonfly commerce vulnerabilities and fixes
Recent CVEs affecting dragonfly commerce, with upgrade or downgrade steps. 2 tracked.
Also searched as: dragonflycommerce.
dragonfly commerce has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-07-12. Highest priority: CVE-2005-2221 (score 43/100).
- CVE-2005-2221 HIGH 7.5 MITIGATE Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements
- CVE-2005-2220 MEDIUM 5.0 MITIGATE Dragonfly Commerce allows remote attackers to change a product price by modifying the x_DragonflyCartProductPr
FAQ
How do I fix dragonfly commerce vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dragonfly commerce being exploited right now?
None of the tracked dragonfly commerce CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dragonfly commerce CVE should I patch first?
CVE-2005-2221 currently ranks highest (43/100): Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements .