PatchTheCVEinvitex vulnerabilities and fixes
Recent CVEs affecting invitex, with upgrade or downgrade steps. 1 tracked.
invitex has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-02-17. Highest priority: CVE-2018-6394 (score 66/100).
- CVE-2018-6394 CRITICAL 9.8 DOWNGRADE SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invite
FAQ
How do I fix invitex vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is invitex being exploited right now?
None of the tracked invitex CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which invitex CVE should I patch first?
CVE-2018-6394 currently ranks highest (66/100): SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invite.