PatchTheCVEcoscms vulnerabilities
Recent CVEs affecting coscms products. 1 tracked.
coscms has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-05-23. Highest priority: CVE-2013-1668 (score 58/100).
- CVE-2013-1668 HIGH 8.5 UPGRADE The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arb
FAQ
How do I fix coscms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is coscms being exploited right now?
None of the tracked coscms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which coscms CVE should I patch first?
CVE-2013-1668 currently ranks highest (58/100): The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arb.