PatchTheCVEdavlin vulnerabilities
Recent CVEs affecting davlin products. 2 tracked.
davlin has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-05-12. Highest priority: CVE-2009-1625 (score 49/100).
- CVE-2009-1625 MEDIUM 6.8 DOWNGRADE Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and ex
- CVE-2008-3859 MEDIUM 5.0 DOWNGRADE Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash
FAQ
How do I fix davlin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is davlin being exploited right now?
None of the tracked davlin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which davlin CVE should I patch first?
CVE-2009-1625 currently ranks highest (49/100): Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and ex.