PatchTheCVEphprunner vulnerabilities and fixes
Recent CVEs affecting phprunner, with upgrade or downgrade steps. 2 tracked.
phprunner has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2009-03-19. Highest priority: CVE-2009-0964 (score 56/100).
- CVE-2009-0964 HIGH 7.5 UPGRADE UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which
- CVE-2009-0963 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execu
FAQ
How do I fix phprunner vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phprunner being exploited right now?
None of the tracked phprunner CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phprunner CVE should I patch first?
CVE-2009-0964 currently ranks highest (56/100): UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which.