PatchTheCVEminiweb vulnerabilities and fixes
Recent CVEs affecting miniweb, with upgrade or downgrade steps. 5 tracked.
miniweb has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2010-01-04. Highest priority: CVE-2008-6582 (score 47/100).
- CVE-2009-4552 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to i
- CVE-2009-4551 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitr
- CVE-2009-3420 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow
- CVE-2009-3419 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to ex
- CVE-2008-6582 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL comma
FAQ
How do I fix miniweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is miniweb being exploited right now?
None of the tracked miniweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which miniweb CVE should I patch first?
CVE-2008-6582 currently ranks highest (47/100): SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL comma.