PatchTheCVEshoutbox vulnerabilities and fixes
Recent CVEs affecting shoutbox, with upgrade or downgrade steps. 9 tracked.
shoutbox has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2010-04-20. Highest priority: CVE-2007-4330 (score 50/100).
- CVE-2009-4767 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers
- CVE-2007-6298 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows
- CVE-2007-4330 MEDIUM 6.8 DOWNGRADE PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arb
- CVE-2007-0546 HIGH 7.8 DOWNGRADE Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which al
- CVE-2006-6721 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote at
- CVE-2006-3989 MEDIUM 5.1 UPGRADE PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote a
- CVE-2006-0606 HIGH 7.5 DOWNGRADE SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary
- CVE-2006-0605 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attacke
- CVE-2002-1429 MEDIUM 5.0 DOWNGRADE Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbit
FAQ
How do I fix shoutbox vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shoutbox being exploited right now?
None of the tracked shoutbox CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shoutbox CVE should I patch first?
CVE-2007-4330 currently ranks highest (50/100): PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arb.