PatchTheCVEphp blue dragon vulnerabilities and fixes
Recent CVEs affecting php blue dragon, with upgrade or downgrade steps. 4 tracked.
Also searched as: phpbluedragon.
php blue dragon has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-09-23. Highest priority: CVE-2006-2392 (score 51/100).
- CVE-2006-4962 MEDIUM 6.4 DOWNGRADE Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attacke
- CVE-2006-4961 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in P
- CVE-2006-4960 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attacker
- CVE-2006-2392 MEDIUM 6.4 DOWNGRADE PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Pla
FAQ
How do I fix php blue dragon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is php blue dragon being exploited right now?
None of the tracked php blue dragon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which php blue dragon CVE should I patch first?
CVE-2006-2392 currently ranks highest (51/100): PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Pla.