PatchTheCVEferretcms vulnerabilities and fixes
Recent CVEs affecting ferretcms, with upgrade or downgrade steps. 4 tracked.
ferretcms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-01-27. Highest priority: CVE-2015-1371 (score 55/100).
- CVE-2015-1374 MEDIUM 6.8 DOWNGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote
- CVE-2015-1373 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attacke
- CVE-2015-1372 HIGH 7.5 DOWNGRADE SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands
- CVE-2015-1371 HIGH 7.5 DOWNGRADE Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitr
FAQ
How do I fix ferretcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ferretcms being exploited right now?
None of the tracked ferretcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ferretcms CVE should I patch first?
CVE-2015-1371 currently ranks highest (55/100): Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitr.