PatchTheCVEdansie vulnerabilities
Recent CVEs affecting dansie products. 4 tracked.
dansie has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-01-16. Highest priority: CVE-2003-1517 (score 43/100).
- CVE-2000-1243 MEDIUM 5.0 DOWNGRADE Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as
- CVE-2008-0292 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in photo_album.pl in Dansie Photo Album 1.0 allows remote attackers t
- CVE-2008-0257 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to i
- CVE-2003-1517 MEDIUM 5.0 MITIGATE cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db para
FAQ
How do I fix dansie vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dansie being exploited right now?
None of the tracked dansie CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dansie CVE should I patch first?
CVE-2003-1517 currently ranks highest (43/100): cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db para.