posty readymade classifieds vulnerabilities and fixes

Recent CVEs affecting posty readymade classifieds, with upgrade or downgrade steps. 4 tracked.

Also searched as: postyreadymadeclassifieds.

posty readymade classifieds has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-13. Highest priority: CVE-2017-17111 (score 68/100).

• CVE-2017-17569 MEDIUM 6.1 MITIGATE Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.
• CVE-2017-17568 HIGH 7.5 MITIGATE Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (a
• CVE-2017-17567 HIGH 7.5 MITIGATE Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.
• CVE-2017-17111 CRITICAL 9.8 DOWNGRADE Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or

FAQ

How do I fix posty readymade classifieds vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is posty readymade classifieds being exploited right now?

None of the tracked posty readymade classifieds CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which posty readymade classifieds CVE should I patch first?

CVE-2017-17111 currently ranks highest (68/100): Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or .

RSS feed for posty readymade classifieds · ← Back to latest CVEs