PatchTheCVEpassword protect vulnerabilities and fixes
Recent CVEs affecting password protect, with upgrade or downgrade steps. 2 tracked.
Also searched as: passwordprotect.
password protect has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-02-10. Highest priority: CVE-2009-0461 (score 53/100).
- CVE-2009-0461 HIGH 7.5 DOWNGRADE Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administr
- CVE-2009-0459 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x a
FAQ
How do I fix password protect vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is password protect being exploited right now?
None of the tracked password protect CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which password protect CVE should I patch first?
CVE-2009-0461 currently ranks highest (53/100): Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administr.