savewebportal vulnerabilities and fixes
Recent CVEs affecting savewebportal, with upgrade or downgrade steps. 5 tracked.
savewebportal has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-08-07. Highest priority: CVE-2005-2686 (score 51/100).
- CVE-2006-4012 MEDIUM 5.1 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to exe
- CVE-2005-2688 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbi
- CVE-2005-2687 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP
- CVE-2005-2686 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and
- CVE-2005-2685 HIGH 7.5 DOWNGRADE SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExp
FAQ
How do I fix savewebportal vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is savewebportal being exploited right now?
None of the tracked savewebportal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which savewebportal CVE should I patch first?
CVE-2005-2686 currently ranks highest (51/100): Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and .