PatchTheCVEgerrit van aaken vulnerabilities
Recent CVEs affecting gerrit van aaken products. 5 tracked.
gerrit van aaken has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-07-25. Highest priority: CVE-2006-0565 (score 55/100).
- CVE-2006-3832 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers
- CVE-2006-3820 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers
- CVE-2006-1114 MEDIUM 6.4 DOWNGRADE Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include
- CVE-2006-1113 MEDIUM 5.0 DOWNGRADE SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrar
- CVE-2006-0565 HIGH 7.5 UPGRADE PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote at
FAQ
How do I fix gerrit van aaken vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gerrit van aaken being exploited right now?
None of the tracked gerrit van aaken CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gerrit van aaken CVE should I patch first?
CVE-2006-0565 currently ranks highest (55/100): PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote at.