PatchTheCVEkitform vulnerabilities and fixes
Recent CVEs affecting kitform, with upgrade or downgrade steps. 1 tracked.
kitform has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-05-15. Highest priority: CVE-2014-3757 (score 49/100).
- CVE-2014-3757 HIGH 7.5 UPGRADE SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the Keep
FAQ
How do I fix kitform vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kitform being exploited right now?
None of the tracked kitform CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kitform CVE should I patch first?
CVE-2014-3757 currently ranks highest (49/100): SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the Keep.