PatchTheCVEdreaxteam vulnerabilities
Recent CVEs affecting dreaxteam products. 2 tracked.
dreaxteam has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-12-27. Highest priority: CVE-2006-6747 (score 48/100).
- CVE-2006-6747 HIGH 7.5 DOWNGRADE SQL injection vulnerability in show_news.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL c
- CVE-2006-6746 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary
FAQ
How do I fix dreaxteam vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dreaxteam being exploited right now?
None of the tracked dreaxteam CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dreaxteam CVE should I patch first?
CVE-2006-6747 currently ranks highest (48/100): SQL injection vulnerability in show_news.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL c.