mpcs vulnerabilities and fixes

Recent CVEs affecting mpcs, with upgrade or downgrade steps. 3 tracked.

mpcs has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-05-18. Highest priority: CVE-2008-2293 (score 53/100).

• CVE-2008-2293 HIGH 7.5 DOWNGRADE admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and
• CVE-2006-5624 HIGH 7.5 UPGRADE Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System (MPCS) 1.0.0 and earlier allow
• CVE-2006-3191 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrar

FAQ

How do I fix mpcs vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mpcs being exploited right now?

None of the tracked mpcs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mpcs CVE should I patch first?

CVE-2008-2293 currently ranks highest (53/100): admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and.

RSS feed for mpcs · ← Back to latest CVEs