PatchTheCVEmaian uploader vulnerabilities and fixes
Recent CVEs affecting maian uploader, with upgrade or downgrade steps. 4 tracked.
Also searched as: maianuploader.
maian uploader has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-01-13. Highest priority: CVE-2014-10004 (score 52/100).
- CVE-2014-10006 MEDIUM 6.8 DOWNGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hij
- CVE-2014-10005 MEDIUM 5.0 DOWNGRADE Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height pa
- CVE-2014-10004 HIGH 7.5 DOWNGRADE SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to exec
- CVE-2014-10003 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arb
FAQ
How do I fix maian uploader vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is maian uploader being exploited right now?
None of the tracked maian uploader CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which maian uploader CVE should I patch first?
CVE-2014-10004 currently ranks highest (52/100): SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to exec.