PatchTheCVEshoutpro vulnerabilities and fixes
Recent CVEs affecting shoutpro, with upgrade or downgrade steps. 2 tracked.
shoutpro has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-04-19. Highest priority: CVE-2007-2141 (score 56/100).
- CVE-2007-2141 HIGH 7.5 UPGRADE Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject
- CVE-2006-7047 MEDIUM 5.0 DOWNGRADE include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path p
FAQ
How do I fix shoutpro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shoutpro being exploited right now?
None of the tracked shoutpro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shoutpro CVE should I patch first?
CVE-2007-2141 currently ranks highest (56/100): Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject.