PatchTheCVEflexbb vulnerabilities and fixes
Recent CVEs affecting flexbb, with upgrade or downgrade steps. 7 tracked.
flexbb has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2008-01-09. Highest priority: CVE-2006-2034 (score 52/100).
- CVE-2008-0157 HIGH 7.5 UPGRADE SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL comma
- CVE-2007-1729 HIGH 7.5 DOWNGRADE SQL injection vulnerability in includes/start.php in Flexbb 1.0.0 10005 Beta Release 1 allows remote attackers
- CVE-2006-2034 HIGH 7.5 DOWNGRADE SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arb
- CVE-2006-1978 HIGH 7.5 UPGRADE SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute ar
- CVE-2006-1977 MEDIUM 5.8 UPGRADE Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject ar
- CVE-2006-1811 MEDIUM 6.4 DOWNGRADE Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL co
- CVE-2006-1810 LOW 1.9 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbi
FAQ
How do I fix flexbb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is flexbb being exploited right now?
None of the tracked flexbb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which flexbb CVE should I patch first?
CVE-2006-2034 currently ranks highest (52/100): SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arb.