readymade video sharing script vulnerabilities and fixes

Recent CVEs affecting readymade video sharing script, with upgrade or downgrade steps. 5 tracked.

Also searched as: readymadevideosharingscript.

readymade video sharing script has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-27. Highest priority: CVE-2017-17627 (score 65/100).

• CVE-2017-17893 MEDIUM 6.1 DOWNGRADE Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid para
• CVE-2017-17892 CRITICAL 9.8 DOWNGRADE Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php
• CVE-2017-17891 HIGH 8.8 DOWNGRADE Readymade Video Sharing Script has CSRF via user-profile-edit.php.
• CVE-2017-17649 MEDIUM 6.1 DOWNGRADE Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.
• CVE-2017-17627 CRITICAL 9.8 DOWNGRADE Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array param

FAQ

How do I fix readymade video sharing script vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is readymade video sharing script being exploited right now?

None of the tracked readymade video sharing script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which readymade video sharing script CVE should I patch first?

CVE-2017-17627 currently ranks highest (65/100): Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array param.

RSS feed for readymade video sharing script · ← Back to latest CVEs