PatchTheCVEdrzes hms vulnerabilities and fixes
Recent CVEs affecting drzes hms, with upgrade or downgrade steps. 4 tracked.
Also searched as: drzeshms.
drzes hms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-12-20. Highest priority: CVE-2005-4137 (score 50/100).
- CVE-2005-4367 MEDIUM 5.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in register_domain.php in DRZES HMS 3.2 allows remote attackers to in
- CVE-2005-4366 MEDIUM 6.4 DOWNGRADE Multiple SQL injection vulnerabilities in DRZES HMS 3.2 allow remote attackers to execute arbitrary SQL comman
- CVE-2005-4137 HIGH 7.5 DOWNGRADE SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary S
- CVE-2005-4136 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbit
FAQ
How do I fix drzes hms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is drzes hms being exploited right now?
None of the tracked drzes hms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which drzes hms CVE should I patch first?
CVE-2005-4137 currently ranks highest (50/100): SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary S.