PatchTheCVEphpwebfilemanager vulnerabilities and fixes
Recent CVEs affecting phpwebfilemanager, with upgrade or downgrade steps. 2 tracked.
phpwebfilemanager has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-08-01. Highest priority: CVE-2007-4117 (score 42/100).
- CVE-2007-4117 MEDIUM 6.8 DOWNGRADE PHP remote file inclusion vulnerability in index.php in phpWebFileManager 0.5 allows remote attackers to execu
- CVE-2003-1542 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows remote attacker
FAQ
How do I fix phpwebfilemanager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpwebfilemanager being exploited right now?
None of the tracked phpwebfilemanager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpwebfilemanager CVE should I patch first?
CVE-2007-4117 currently ranks highest (42/100): PHP remote file inclusion vulnerability in index.php in phpWebFileManager 0.5 allows remote attackers to execu.