PatchTheCVEtoendacms vulnerabilities and fixes
Recent CVEs affecting toendacms, with upgrade or downgrade steps. 10 tracked.
toendacms has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2007-04-13. Highest priority: CVE-2006-4349 (score 53/100).
- CVE-2007-1872 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in toendaCMS 1.5.3 allows remote attackers to inject arbitrary web sc
- CVE-2006-4349 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbi
- CVE-2006-4016 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1
- CVE-2006-3362 MEDIUM 5.1 DOWNGRADE DOWNGRADE Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as use
- CVE-2006-2799 MEDIUM 6.8 UPGRADE Cross-site scripting (XSS) vulnerability in content_footer.php in toendaCMS 0.7.0 allows remote attackers to i
- CVE-2005-4422 MEDIUM 6.5 DOWNGRADE Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administra
- CVE-2005-4353 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows r
- CVE-2005-4277 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to
- CVE-2005-3551 MEDIUM 5.0 UPGRADE toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote att
- CVE-2005-3550 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arb
FAQ
How do I fix toendacms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is toendacms being exploited right now?
None of the tracked toendacms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which toendacms CVE should I patch first?
CVE-2006-4349 currently ranks highest (53/100): PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbi.