PatchTheCVEgonafish vulnerabilities
Recent CVEs affecting gonafish products. 6 tracked.
gonafish has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2010-03-15. Highest priority: CVE-2006-3884 (score 54/100).
- CVE-2009-4718 HIGH 7.5 MITIGATE SQL injection vulnerability in visitorduration.php in Gonafish WebStatCaffe allows remote attackers to execute
- CVE-2009-4717 MEDIUM 4.3 MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject
- CVE-2008-4202 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbi
- CVE-2006-3932 MEDIUM 5.1 DOWNGRADE SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitra
- CVE-2006-3884 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execu
- CVE-2006-3883 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to injec
FAQ
How do I fix gonafish vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gonafish being exploited right now?
None of the tracked gonafish CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gonafish CVE should I patch first?
CVE-2006-3884 currently ranks highest (54/100): Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execu.