PatchTheCVEgnew vulnerabilities and fixes
Recent CVEs affecting gnew, with upgrade or downgrade steps. 4 tracked.
gnew has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-04-15. Highest priority: CVE-2013-5639 (score 55/100).
- CVE-2013-7368 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Gnew 2013.1 allow remote attackers to inject arbitrary
- CVE-2013-7349 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands
- CVE-2013-5640 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands
- CVE-2013-5639 HIGH 7.5 UPGRADE Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to rea
FAQ
How do I fix gnew vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gnew being exploited right now?
None of the tracked gnew CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gnew CVE should I patch first?
CVE-2013-5639 currently ranks highest (55/100): Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to rea.