PatchTheCVEmyspeach vulnerabilities and fixes
Recent CVEs affecting myspeach, with upgrade or downgrade steps. 6 tracked.
myspeach has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2007-04-18. Highest priority: CVE-2006-4630 (score 54/100).
- CVE-2007-2095 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in chat.php in MySpeach 1.9 allows remote attackers to execute arbitra
- CVE-2007-1896 MEDIUM 5.8 DOWNGRADE Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attacker
- CVE-2007-1895 MEDIUM 6.8 UPGRADE PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with
- CVE-2007-0498 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in up.php in MySpeach 2.1 beta and possibly earlier allows remote atta
- CVE-2007-0491 MEDIUM 6.8 UPGRADE PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote atta
- CVE-2006-4630 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when registe
FAQ
How do I fix myspeach vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is myspeach being exploited right now?
None of the tracked myspeach CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which myspeach CVE should I patch first?
CVE-2006-4630 currently ranks highest (54/100): PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when registe.