PatchTheCVEeva-web vulnerabilities and fixes
Recent CVEs affecting eva-web, with upgrade or downgrade steps. 3 tracked.
Also searched as: eva web.
eva-web has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2007-06-27. Highest priority: CVE-2007-3460 (score 53/100).
- CVE-2007-3460 HIGH 7.5 UPGRADE Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow remote attac
- CVE-2006-2690 HIGH 7.8 UPGRADE An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote attackers to obtain the
- CVE-2006-2689 MEDIUM 6.8 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inj
FAQ
How do I fix eva-web vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eva-web being exploited right now?
None of the tracked eva-web CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eva-web CVE should I patch first?
CVE-2007-3460 currently ranks highest (53/100): Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow remote attac.