PatchTheCVEeasyscripts vulnerabilities
Recent CVEs affecting easyscripts products. 6 tracked.
easyscripts has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-04-25. Highest priority: CVE-2001-1437 (score 52/100).
- CVE-2008-1958 MEDIUM 6.5 DOWNGRADE Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows re
- CVE-2008-1957 HIGH 7.5 DOWNGRADE SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL
- CVE-2001-1527 LOW 2.1 DOWNGRADE easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local user
- CVE-2001-1526 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allow
- CVE-2001-1525 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers t
- CVE-2001-1437 HIGH 7.5 UPGRADE easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request wi
FAQ
How do I fix easyscripts vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is easyscripts being exploited right now?
None of the tracked easyscripts CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which easyscripts CVE should I patch first?
CVE-2001-1437 currently ranks highest (52/100): easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request wi.