PatchTheCVEsharetronix vulnerabilities and fixes
Recent CVEs affecting sharetronix, with upgrade or downgrade steps. 7 tracked.
sharetronix has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2014-06-13. Highest priority: CVE-2014-3414 (score 49/100).
- CVE-2014-3415 MEDIUM 6.5 UPGRADE SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary S
- CVE-2014-3414 MEDIUM 6.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers to hijack th
- CVE-2013-5356 HIGH 7.5 UPGRADE Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, w
- CVE-2013-5355 MEDIUM 6.8 DOWNGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in Sharetronix 3.1.1 allow remote attackers to hija
- CVE-2013-5354 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL co
- CVE-2013-5353 MEDIUM 6.8 UPGRADE Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.
- CVE-2013-5352 MEDIUM 6.8 UPGRADE Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary PHP code via the (1) acti
FAQ
How do I fix sharetronix vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sharetronix being exploited right now?
None of the tracked sharetronix CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sharetronix CVE should I patch first?
CVE-2014-3414 currently ranks highest (49/100): Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers to hijack th.