PatchTheCVEezdatabase vulnerabilities and fixes
Recent CVEs affecting ezdatabase, with upgrade or downgrade steps. 6 tracked.
ezdatabase has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2007-01-30. Highest priority: CVE-2006-0214 (score 53/100).
- CVE-2007-0592 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web s
- CVE-2006-0315 MEDIUM 5.8 UPGRADE index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and includi
- CVE-2006-0214 HIGH 7.5 DOWNGRADE Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP co
- CVE-2005-4304 MEDIUM 5.0 UPGRADE index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an inval
- CVE-2005-4303 HIGH 7.5 UPGRADE SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute a
- CVE-2005-4302 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to incl
FAQ
How do I fix ezdatabase vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ezdatabase being exploited right now?
None of the tracked ezdatabase CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ezdatabase CVE should I patch first?
CVE-2006-0214 currently ranks highest (53/100): Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP co.