PatchTheCVEsitex vulnerabilities and fixes
Recent CVEs affecting sitex, with upgrade or downgrade steps. 6 tracked.
sitex has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2010-04-09. Highest priority: CVE-2009-1846 (score 52/100).
- CVE-2010-1343 HIGH 7.5 DOWNGRADE SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL
- CVE-2009-1846 HIGH 7.5 UPGRADE Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to in
- CVE-2007-1237 MEDIUM 5.0 DOWNGRADE sitex allows remote attackers to obtain potentially sensitive information via a ' (quote) value for certain pa
- CVE-2007-1236 MEDIUM 6.4 MITIGATE sitex allows remote attackers to obtain sensitive information via a request with a numerical value for the (1)
- CVE-2007-1235 HIGH 7.5 DOWNGRADE Unrestricted file upload vulnerability in sitex allows remote attackers to upload arbitrary PHP code via an av
- CVE-2007-1234 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to inject arbitrary web sc
FAQ
How do I fix sitex vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sitex being exploited right now?
None of the tracked sitex CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sitex CVE should I patch first?
CVE-2009-1846 currently ranks highest (52/100): Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to in.