hb-ns vulnerabilities and fixes
Recent CVEs affecting hb-ns, with upgrade or downgrade steps. 4 tracked.
Also searched as: hb ns.
hb-ns has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-12-17. Highest priority: CVE-2009-4262 (score 49/100).
- CVE-2009-4348 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in Harold Bakker's NewsScript (HB-NS) 1.3 allows remote
- CVE-2009-4262 HIGH 7.5 DOWNGRADE Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via
- CVE-2006-2146 MEDIUM 5.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inje
- CVE-2006-2145 MEDIUM 6.4 DOWNGRADE Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary
FAQ
How do I fix hb-ns vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hb-ns being exploited right now?
None of the tracked hb-ns CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hb-ns CVE should I patch first?
CVE-2009-4262 currently ranks highest (49/100): Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via.