PatchTheCVEilch vulnerabilities
Recent CVEs affecting ilch products. 7 tracked.
ilch has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-03-29. Highest priority: CVE-2019-17046 (score 53/100).
- CVE-2021-27352 MEDIUM 5.4 DOWNGRADE An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's
- CVE-2019-20524 MEDIUM 6.1 DOWNGRADE ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.
- CVE-2019-20523 MEDIUM 6.1 DOWNGRADE ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.
- CVE-2019-20522 MEDIUM 6.1 DOWNGRADE ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.
- CVE-2019-17046 HIGH 7.2 DOWNGRADE Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/me
- CVE-2019-17045 MEDIUM 4.8 DOWNGRADE Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.
- CVE-2015-2083 MEDIUM 6.8 MITIGATE Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the authenticati
FAQ
How do I fix ilch vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ilch being exploited right now?
None of the tracked ilch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ilch CVE should I patch first?
CVE-2019-17046 currently ranks highest (53/100): Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/me.