PatchTheCVEresume clone script vulnerabilities and fixes
Recent CVEs affecting resume clone script, with upgrade or downgrade steps. 2 tracked.
Also searched as: resumeclonescript.
resume clone script has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-27. Highest priority: CVE-2017-17641 (score 65/100).
- CVE-2017-17931 CRITICAL 9.8 DOWNGRADE PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.
- CVE-2017-17641 CRITICAL 9.8 DOWNGRADE Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.
FAQ
How do I fix resume clone script vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is resume clone script being exploited right now?
None of the tracked resume clone script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which resume clone script CVE should I patch first?
CVE-2017-17641 currently ranks highest (65/100): Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter..