PatchTheCVEicash vulnerabilities
Recent CVEs affecting icash products. 4 tracked.
icash has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-01-12. Highest priority: CVE-2008-5892 (score 47/100).
- CVE-2008-5893 LOW 2.6 DOWNGRADE Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inj
- CVE-2008-5892 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL comman
- CVE-2008-5889 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary
- CVE-2008-5888 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands
FAQ
How do I fix icash vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is icash being exploited right now?
None of the tracked icash CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which icash CVE should I patch first?
CVE-2008-5892 currently ranks highest (47/100): Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL comman.