PatchTheCVEeasy-script vulnerabilities
Recent CVEs affecting easy-script products. 7 tracked.
easy-script has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-02-19. Highest priority: CVE-2008-5322 (score 53/100).
- CVE-2008-6165 MEDIUM 6.8 DOWNGRADE SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled, allows remote
- CVE-2008-5323 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject a
- CVE-2008-5322 HIGH 7.8 DOWNGRADE Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to ind
- CVE-2008-5065 HIGH 7.5 DOWNGRADE TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the
- CVE-2008-4783 HIGH 7.5 DOWNGRADE tlAds 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the tlAds
- CVE-2008-4781 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute
- CVE-2008-4780 MEDIUM 6.8 DOWNGRADE Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows
FAQ
How do I fix easy-script vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is easy-script being exploited right now?
None of the tracked easy-script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which easy-script CVE should I patch first?
CVE-2008-5322 currently ranks highest (53/100): Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to ind.