PatchTheCVElan management system vulnerabilities and fixes
Recent CVEs affecting lan management system, with upgrade or downgrade steps. 4 tracked.
Also searched as: lanmanagementsystem.
lan management system has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-06-21. Highest priority: CVE-2007-1643 (score 64/100).
- CVE-2007-3325 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier a
- CVE-2007-2205 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and
- CVE-2007-2198 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in LAN Management System (LMS) before 1.6.9 allows remote attackers t
- CVE-2007-1643 HIGH 10.0 UPGRADE Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow
FAQ
How do I fix lan management system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lan management system being exploited right now?
None of the tracked lan management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lan management system CVE should I patch first?
CVE-2007-1643 currently ranks highest (64/100): Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow.