PatchTheCVEqdig vulnerabilities and fixes
Recent CVEs affecting qdig, with upgrade or downgrade steps. 2 tracked.
qdig has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-02-12. Highest priority: CVE-2007-0876 (score 33/100).
- CVE-2007-0876 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel-20060624 allo
- CVE-2006-3265 LOW 2.6 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in index.php in Qdig before 1.2.9.3, when register_globals
FAQ
How do I fix qdig vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is qdig being exploited right now?
None of the tracked qdig CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which qdig CVE should I patch first?
CVE-2007-0876 currently ranks highest (33/100): Cross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel-20060624 allo.