PatchTheCVEphpscheduleit vulnerabilities and fixes
Recent CVEs affecting phpscheduleit, with upgrade or downgrade steps. 3 tracked.
phpscheduleit has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2011-09-24. Highest priority: CVE-2009-0820 (score 54/100).
- CVE-2011-3787 MEDIUM 5.0 DOWNGRADE phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php fi
- CVE-2009-0820 HIGH 7.5 UPGRADE Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbit
- CVE-2008-6132 MEDIUM 6.8 UPGRADE Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disa
FAQ
How do I fix phpscheduleit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpscheduleit being exploited right now?
None of the tracked phpscheduleit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpscheduleit CVE should I patch first?
CVE-2009-0820 currently ranks highest (54/100): Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbit.