PatchTheCVEzina vulnerabilities and fixes
Recent CVEs affecting zina, with upgrade or downgrade steps. 4 tracked.
zina has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-05-28. Highest priority: CVE-2007-0303 (score 54/100).
- CVE-2008-2495 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impa
- CVE-2008-2494 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitr
- CVE-2007-0303 HIGH 10.0 UPGRADE Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related
- CVE-2005-4631 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitr
FAQ
How do I fix zina vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zina being exploited right now?
None of the tracked zina CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zina CVE should I patch first?
CVE-2007-0303 currently ranks highest (54/100): Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related.