PatchTheCVElanai cms vulnerabilities and fixes
Recent CVEs affecting lanai cms, with upgrade or downgrade steps. 2 tracked.
Also searched as: lanaicms.
lanai cms has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-10-01. Highest priority: CVE-2007-5156 (score 55/100).
- CVE-2007-5156 HIGH 7.5 DOWNGRADE UPGRADE Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX
- CVE-2007-4210 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to ex
FAQ
How do I fix lanai cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lanai cms being exploited right now?
None of the tracked lanai cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lanai cms CVE should I patch first?
CVE-2007-5156 currently ranks highest (55/100): Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX .