PatchTheCVEowl intranet engine vulnerabilities and fixes
Recent CVEs affecting owl intranet engine, with upgrade or downgrade steps. 6 tracked.
Also searched as: owlintranetengine.
owl intranet engine has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-08-17. Highest priority: CVE-2006-1149 (score 55/100).
- CVE-2006-4212 HIGH 7.5 DOWNGRADE SQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attac
- CVE-2006-4211 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows
- CVE-2006-1149 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals
- CVE-2005-0265 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbi
- CVE-2005-0264 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to
- CVE-2003-0341 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to in
FAQ
How do I fix owl intranet engine vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is owl intranet engine being exploited right now?
None of the tracked owl intranet engine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which owl intranet engine CVE should I patch first?
CVE-2006-1149 currently ranks highest (55/100): PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals .