PatchTheCVEcodeworx technologies vulnerabilities
Recent CVEs affecting codeworx technologies products. 12 tracked.
codeworx technologies has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2006-09-15. Highest priority: CVE-2006-4837 (score 53/100).
- CVE-2006-4838 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbi
- CVE-2006-4837 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbi
- CVE-2006-4836 MEDIUM 5.1 DOWNGRADE SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL
- CVE-2006-1120 LOW 2.6 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals ena
- CVE-2006-0220 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to
- CVE-2005-4227 HIGH 7.5 DOWNGRADE Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute
- CVE-2005-3365 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary
- CVE-2005-0454 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbit
- CVE-2004-2512 MEDIUM 4.3 UPGRADE CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduc
- CVE-2004-2511 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to
- CVE-2002-0282 MEDIUM 5.0 DOWNGRADE DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct
- CVE-2002-0281 MEDIUM 5.1 DOWNGRADE Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of
FAQ
How do I fix codeworx technologies vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is codeworx technologies being exploited right now?
None of the tracked codeworx technologies CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which codeworx technologies CVE should I patch first?
CVE-2006-4837 currently ranks highest (53/100): Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbi.