PatchTheCVEphpay vulnerabilities and fixes
Recent CVEs affecting phpay, with upgrade or downgrade steps. 2 tracked.
phpay has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-12-20. Highest priority: CVE-2007-6471 (score 46/100).
- CVE-2007-6471 MEDIUM 5.8 DOWNGRADE Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct
- CVE-2006-4210 LOW 2.6 DOWNGRADE nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attac
FAQ
How do I fix phpay vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpay being exploited right now?
None of the tracked phpay CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpay CVE should I patch first?
CVE-2007-6471 currently ranks highest (46/100): Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct .