PatchTheCVEfusetalk vulnerabilities and fixes
Recent CVEs affecting fusetalk, with upgrade or downgrade steps. 9 tracked.
fusetalk has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2012-10-04. Highest priority: CVE-2007-3301 (score 47/100).
- CVE-2012-5295 MEDIUM 4.3 UPGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attacke
- CVE-2007-3705 HIGH 7.5 DOWNGRADE SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the
- CVE-2007-3339 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, St
- CVE-2007-3301 HIGH 7.5 DOWNGRADE SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execut
- CVE-2007-3273 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL comm
- CVE-2004-1995 MEDIUM 6.5 DOWNGRADE Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary ac
- CVE-2004-1994 MEDIUM 5.0 DOWNGRADE FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm.
- CVE-2004-1594 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web scri
- CVE-2002-2166 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to insert arbitrary H
FAQ
How do I fix fusetalk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fusetalk being exploited right now?
None of the tracked fusetalk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fusetalk CVE should I patch first?
CVE-2007-3301 currently ranks highest (47/100): SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execut.