PatchTheCVEpafaq vulnerabilities and fixes
Recent CVEs affecting pafaq, with upgrade or downgrade steps. 5 tracked.
pafaq has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-06-20. Highest priority: CVE-2005-2012 (score 48/100).
- CVE-2005-2014 MEDIUM 4.6 DOWNGRADE The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute
- CVE-2005-2013 MEDIUM 5.0 DOWNGRADE paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.
- CVE-2005-2012 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrar
- CVE-2005-2011 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbit
- CVE-2005-0475 MEDIUM 6.4 DOWNGRADE SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute ar
FAQ
How do I fix pafaq vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pafaq being exploited right now?
None of the tracked pafaq CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pafaq CVE should I patch first?
CVE-2005-2012 currently ranks highest (48/100): Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrar.