PatchTheCVEravennuke vulnerabilities and fixes
Recent CVEs affecting ravennuke, with upgrade or downgrade steps. 6 tracked.
ravennuke has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-02-22. Highest priority: CVE-2009-0677 (score 52/100).
- CVE-2009-0679 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers
- CVE-2009-0678 MEDIUM 5.0 DOWNGRADE images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts arr
- CVE-2009-0677 MEDIUM 6.5 DOWNGRADE avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 a
- CVE-2009-0674 MEDIUM 6.0 DOWNGRADE images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled,
- CVE-2009-0673 MEDIUM 6.5 DOWNGRADE Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services Rav
- CVE-2009-0672 MEDIUM 6.5 DOWNGRADE SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote auth
FAQ
How do I fix ravennuke vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ravennuke being exploited right now?
None of the tracked ravennuke CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ravennuke CVE should I patch first?
CVE-2009-0677 currently ranks highest (52/100): avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 a.