PatchTheCVEhucart vulnerabilities and fixes
Recent CVEs affecting hucart, with upgrade or downgrade steps. 4 tracked.
hucart has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-08-26. Highest priority: CVE-2020-18477 (score 51/100).
- CVE-2020-18477 HIGH 8.8 DOWNGRADE SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message con_conten
- CVE-2020-18476 HIGH 8.8 DOWNGRADE SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usd_image
- CVE-2020-18475 MEDIUM 5.4 DOWNGRADE Cross Site Scripting (XSS) vulnerabilty exists in Hucart CMS 5.7.4 is via the mes_title field
- CVE-2020-18158 MEDIUM 5.4 DOWNGRADE Cross Site Scripting (XSS) vulnerability in HuCart 5.7.4 via nickname in index.php.
FAQ
How do I fix hucart vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hucart being exploited right now?
None of the tracked hucart CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hucart CVE should I patch first?
CVE-2020-18477 currently ranks highest (51/100): SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message con_conten.