PatchTheCVEthatware vulnerabilities and fixes
Recent CVEs affecting thatware, with upgrade or downgrade steps. 5 tracked.
thatware has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2006-08-17. Highest priority: CVE-2006-4213 (score 53/100).
- CVE-2006-4213 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier
- CVE-2002-2299 MEDIUM 6.8 UPGRADE PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers
- CVE-2002-2298 MEDIUM 6.8 UPGRADE PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to
- CVE-2002-2297 MEDIUM 6.8 DOWNGRADE PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to
- CVE-2002-2252 HIGH 7.5 UPGRADE SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute a
FAQ
How do I fix thatware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is thatware being exploited right now?
None of the tracked thatware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which thatware CVE should I patch first?
CVE-2006-4213 currently ranks highest (53/100): PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier.