PatchTheCVEgigs script vulnerabilities and fixes
Recent CVEs affecting gigs script, with upgrade or downgrade steps. 2 tracked.
Also searched as: gigsscript.
gigs script has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-13. Highest priority: CVE-2017-17576 (score 66/100).
- CVE-2017-17576 CRITICAL 9.8 DOWNGRADE FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parame
- CVE-2017-15963 CRITICAL 9.8 DOWNGRADE iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.
FAQ
How do I fix gigs script vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gigs script being exploited right now?
None of the tracked gigs script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gigs script CVE should I patch first?
CVE-2017-17576 currently ranks highest (66/100): FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parame.