PatchTheCVEublog reload vulnerabilities and fixes
Recent CVEs affecting ublog reload, with upgrade or downgrade steps. 3 tracked.
Also searched as: ublogreload.
ublog reload has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-02-06. Highest priority: CVE-2005-2010 (score 42/100).
- CVE-2007-0798 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arb
- CVE-2005-2010 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inj
- CVE-2005-0938 MEDIUM 5.0 DOWNGRADE Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to rea
FAQ
How do I fix ublog reload vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ublog reload being exploited right now?
None of the tracked ublog reload CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ublog reload CVE should I patch first?
CVE-2005-2010 currently ranks highest (42/100): Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inj.