PatchTheCVEjsboard vulnerabilities and fixes
Recent CVEs affecting jsboard, with upgrade or downgrade steps. 3 tracked.
jsboard has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-04-03. Highest priority: CVE-2007-1842 (score 55/100).
- CVE-2007-1842 HIGH 7.5 UPGRADE Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and
- CVE-2006-2109 MEDIUM 6.8 UPGRADE Cross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in JSBoard 2.0.1
- CVE-2005-0300 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read
FAQ
How do I fix jsboard vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jsboard being exploited right now?
None of the tracked jsboard CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jsboard CVE should I patch first?
CVE-2007-1842 currently ranks highest (55/100): Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and.