PatchTheCVEavailscript vulnerabilities
Recent CVEs affecting availscript products. 9 tracked.
availscript has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-08-21. Highest priority: CVE-2008-6900 (score 50/100).
- CVE-2008-7021 MEDIUM 6.0 MITIGATE Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authent
- CVE-2008-6900 MEDIUM 6.5 MITIGATE Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article S
- CVE-2008-6037 HIGH 7.5 MITIGATE SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbit
- CVE-2008-4375 HIGH 7.5 MITIGATE SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to exec
- CVE-2008-4373 HIGH 7.5 MITIGATE SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attacker
- CVE-2008-4372 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers
- CVE-2008-4371 HIGH 7.5 MITIGATE SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute a
- CVE-2008-4370 MEDIUM 4.3 MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to injec
- CVE-2008-4369 HIGH 7.5 MITIGATE SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrar
FAQ
How do I fix availscript vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is availscript being exploited right now?
None of the tracked availscript CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which availscript CVE should I patch first?
CVE-2008-6900 currently ranks highest (50/100): Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article S.