PatchTheCVEfortunescripts vulnerabilities
Recent CVEs affecting fortunescripts products. 3 tracked.
fortunescripts has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-27. Highest priority: CVE-2017-17573 (score 66/100).
- CVE-2017-17904 MEDIUM 5.4 DOWNGRADE FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to use
- CVE-2017-17903 HIGH 8.8 DOWNGRADE FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.
- CVE-2017-17573 CRITICAL 9.8 DOWNGRADE FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_cat
FAQ
How do I fix fortunescripts vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fortunescripts being exploited right now?
None of the tracked fortunescripts CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fortunescripts CVE should I patch first?
CVE-2017-17573 currently ranks highest (66/100): FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_cat.