PatchTheCVEheybbs vulnerabilities and fixes
Recent CVEs affecting heybbs, with upgrade or downgrade steps. 3 tracked.
heybbs has 3 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-09-03. Highest priority: CVE-2020-25006 (score 60/100).
- CVE-2020-25006 CRITICAL 9.8 DOWNGRADE Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a r
- CVE-2020-25005 CRITICAL 9.8 DOWNGRADE Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote at
- CVE-2020-25004 CRITICAL 9.8 DOWNGRADE Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote a
FAQ
How do I fix heybbs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is heybbs being exploited right now?
None of the tracked heybbs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which heybbs CVE should I patch first?
CVE-2020-25006 currently ranks highest (60/100): Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a r.