PatchTheCVEheybbs project vulnerabilities
Recent CVEs affecting heybbs project products. 3 tracked.
heybbs project has 3 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-09-03. Highest priority: CVE-2020-25006 (score 60/100).
- CVE-2020-25006 CRITICAL 9.8 DOWNGRADE Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a r
- CVE-2020-25005 CRITICAL 9.8 DOWNGRADE Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote at
- CVE-2020-25004 CRITICAL 9.8 DOWNGRADE Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote a
FAQ
How do I fix heybbs project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is heybbs project being exploited right now?
None of the tracked heybbs project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which heybbs project CVE should I patch first?
CVE-2020-25006 currently ranks highest (60/100): Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a r.