PatchTheCVEe-uploader pro vulnerabilities and fixes
Recent CVEs affecting e-uploader pro, with upgrade or downgrade steps. 2 tracked.
Also searched as: e uploader pro, e-uploaderpro.
e-uploader pro has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-11-14. Highest priority: CVE-2006-6694 (score 52/100).
- CVE-2008-5075 MEDIUM 6.8 DOWNGRADE Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disa
- CVE-2006-6694 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in include/config.php in E-Uploader Pro 1.0 and earlier allows remote attack
FAQ
How do I fix e-uploader pro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is e-uploader pro being exploited right now?
None of the tracked e-uploader pro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which e-uploader pro CVE should I patch first?
CVE-2006-6694 currently ranks highest (52/100): Directory traversal vulnerability in include/config.php in E-Uploader Pro 1.0 and earlier allows remote attack.