PatchTheCVEextrosoft vulnerabilities
Recent CVEs affecting extrosoft products. 3 tracked.
extrosoft has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-03-06. Highest priority: CVE-2009-0535 (score 52/100).
- CVE-2009-0535 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, a
- CVE-2008-6404 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3 allows remote at
- CVE-2008-6116 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remot
FAQ
How do I fix extrosoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is extrosoft being exploited right now?
None of the tracked extrosoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which extrosoft CVE should I patch first?
CVE-2009-0535 currently ranks highest (52/100): Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, a.