hot scripts clone vulnerabilities and fixes

Recent CVEs affecting hot scripts clone, with upgrade or downgrade steps. 4 tracked.

Also searched as: hotscriptsclone.

hot scripts clone has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-04-12. Highest priority: CVE-2017-17612 (score 67/100).

• CVE-2018-7650 MEDIUM 4.8 DOWNGRADE PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS withi
• CVE-2018-6903 HIGH 8.8 DOWNGRADE PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-m
• CVE-2018-6878 MEDIUM 5.4 DOWNGRADE Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classifie
• CVE-2017-17612 CRITICAL 9.8 DOWNGRADE Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.

FAQ

How do I fix hot scripts clone vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is hot scripts clone being exploited right now?

None of the tracked hot scripts clone CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which hot scripts clone CVE should I patch first?

CVE-2017-17612 currently ranks highest (67/100): Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter..

RSS feed for hot scripts clone · ← Back to latest CVEs