PatchTheCVEthickbox gallery vulnerabilities and fixes
Recent CVEs affecting thickbox gallery, with upgrade or downgrade steps. 2 tracked.
Also searched as: thickboxgallery.
thickbox gallery has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-05-12. Highest priority: CVE-2009-1625 (score 49/100).
- CVE-2009-1625 MEDIUM 6.8 DOWNGRADE Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and ex
- CVE-2008-3859 MEDIUM 5.0 DOWNGRADE Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash
FAQ
How do I fix thickbox gallery vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is thickbox gallery being exploited right now?
None of the tracked thickbox gallery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which thickbox gallery CVE should I patch first?
CVE-2009-1625 currently ranks highest (49/100): Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and ex.