PatchTheCVEwowroster vulnerabilities and fixes
Recent CVEs affecting wowroster, with upgrade or downgrade steps. 2 tracked.
wowroster has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-08-05. Highest priority: CVE-2006-3998 (score 53/100).
- CVE-2006-3998 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earl
- CVE-2006-3997 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and ea
FAQ
How do I fix wowroster vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wowroster being exploited right now?
None of the tracked wowroster CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wowroster CVE should I patch first?
CVE-2006-3998 currently ranks highest (53/100): PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earl.