PatchTheCVEpblang vulnerabilities and fixes
Recent CVEs affecting pblang, with upgrade or downgrade steps. 10 tracked.
pblang has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2007-06-06. Highest priority: CVE-2007-1052 (score 56/100).
- CVE-2007-3096 MEDIUM 6.8 UPGRADE Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic_quotes_gpc is
- CVE-2007-1052 HIGH 10.0 UPGRADE PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and earlier allows remote attackers
- CVE-2006-5062 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier
- CVE-2005-2895 MEDIUM 5.0 DOWNGRADE setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive infor
- CVE-2005-2894 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier version
- CVE-2005-2893 HIGH 7.5 DOWNGRADE Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, all
- CVE-2005-2892 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remot
- CVE-2005-0631 LOW 2.1 DOWNGRADE delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id"
- CVE-2005-0630 LOW 2.1 DOWNGRADE sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the
- CVE-2005-0526 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary
FAQ
How do I fix pblang vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pblang being exploited right now?
None of the tracked pblang CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pblang CVE should I patch first?
CVE-2007-1052 currently ranks highest (56/100): PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and earlier allows remote attackers .