PatchTheCVEphp live vulnerabilities and fixes
Recent CVEs affecting php live, with upgrade or downgrade steps. 5 tracked.
Also searched as: phplive.
php live has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2007-06-14. Highest priority: CVE-2006-3911 (score 55/100).
- CVE-2007-3218 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in request.php in PHP Live! 3.2.2 and earlier allows remote attackers
- CVE-2006-6769 MEDIUM 6.8 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 and earlier allow remote attackers to i
- CVE-2006-3911 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to ex
- CVE-2006-1373 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to injec
- CVE-2004-2485 MEDIUM 5.0 UPGRADE Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attacker
FAQ
How do I fix php live vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is php live being exploited right now?
None of the tracked php live CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which php live CVE should I patch first?
CVE-2006-3911 currently ranks highest (55/100): PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to ex.