PatchTheCVEtr script news vulnerabilities and fixes
Recent CVEs affecting tr script news, with upgrade or downgrade steps. 3 tracked.
Also searched as: trscriptnews.
tr script news has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-05-29. Highest priority: CVE-2008-1958 (score 50/100).
- CVE-2008-2508 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject a
- CVE-2008-1958 MEDIUM 6.5 DOWNGRADE Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows re
- CVE-2008-1957 HIGH 7.5 DOWNGRADE SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL
FAQ
How do I fix tr script news vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tr script news being exploited right now?
None of the tracked tr script news CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tr script news CVE should I patch first?
CVE-2008-1958 currently ranks highest (50/100): Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows re.