PatchTheCVEeggblog vulnerabilities
Recent CVEs affecting eggblog products. 5 tracked.
eggblog has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2011-09-23. Highest priority: CVE-2008-0159 (score 49/100).
- CVE-2011-3732 MEDIUM 5.0 DOWNGRADE eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, whi
- CVE-2008-1626 HIGH 7.5 UPGRADE SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands
- CVE-2008-0159 MEDIUM 6.8 UPGRADE SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbit
- CVE-2007-5980 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in home/rss.php in eggblog before 3.1.1 allows remote attackers to in
- CVE-2007-2978 MEDIUM 6.8 UPGRADE Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by
FAQ
How do I fix eggblog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eggblog being exploited right now?
None of the tracked eggblog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eggblog CVE should I patch first?
CVE-2008-0159 currently ranks highest (49/100): SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbit.