PatchTheCVEcells vulnerabilities
Recent CVEs affecting cells products. 3 tracked.
cells has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-28. Highest priority: CVE-2017-17950 (score 51/100).
- CVE-2017-17950 HIGH 8.8 DOWNGRADE Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
- CVE-2017-17949 MEDIUM 6.1 DOWNGRADE Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.
- CVE-2017-17948 MEDIUM 6.1 DOWNGRADE Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.
FAQ
How do I fix cells vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cells being exploited right now?
None of the tracked cells CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cells CVE should I patch first?
CVE-2017-17950 currently ranks highest (51/100): Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter..