PatchTheCVEilch cms vulnerabilities and fixes
Recent CVEs affecting ilch cms, with upgrade or downgrade steps. 6 tracked.
Also searched as: ilchcms.
ilch cms has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-03-29. Highest priority: CVE-2019-17046 (score 53/100).
- CVE-2021-27352 MEDIUM 5.4 DOWNGRADE An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's
- CVE-2019-20524 MEDIUM 6.1 DOWNGRADE ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.
- CVE-2019-20523 MEDIUM 6.1 DOWNGRADE ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.
- CVE-2019-20522 MEDIUM 6.1 DOWNGRADE ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.
- CVE-2019-17046 HIGH 7.2 DOWNGRADE Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/me
- CVE-2019-17045 MEDIUM 4.8 DOWNGRADE Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.
FAQ
How do I fix ilch cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ilch cms being exploited right now?
None of the tracked ilch cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ilch cms CVE should I patch first?
CVE-2019-17046 currently ranks highest (53/100): Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/me.