PatchTheCVEsitex cms vulnerabilities and fixes
Recent CVEs affecting sitex cms, with upgrade or downgrade steps. 2 tracked.
Also searched as: sitexcms.
sitex cms has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-10-01. Highest priority: CVE-2007-5156 (score 55/100).
- CVE-2007-5156 HIGH 7.5 DOWNGRADE UPGRADE Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX
- CVE-2007-5141 MEDIUM 6.8 DOWNGRADE SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to execute arbitrary
FAQ
How do I fix sitex cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sitex cms being exploited right now?
None of the tracked sitex cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sitex cms CVE should I patch first?
CVE-2007-5156 currently ranks highest (55/100): Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX .