PatchTheCVEphpweblog vulnerabilities and fixes
Recent CVEs affecting phpweblog, with upgrade or downgrade steps. 2 tracked.
phpweblog has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-03-07. Highest priority: CVE-2001-0088 (score 51/100).
- CVE-2005-0698 MEDIUM 4.6 DOWNGRADE PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbi
- CVE-2001-0088 HIGH 7.5 DOWNGRADE common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the p
FAQ
How do I fix phpweblog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpweblog being exploited right now?
None of the tracked phpweblog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpweblog CVE should I patch first?
CVE-2001-0088 currently ranks highest (51/100): common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the p.