PatchTheCVEincluder.cgi vulnerabilities
Recent CVEs affecting includer.cgi products. 3 tracked.
includer.cgi has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-02. Highest priority: CVE-2005-0801 (score 36/100).
- CVE-2005-1356 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inj
- CVE-2005-1355 MEDIUM 5.0 DOWNGRADE includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argume
- CVE-2005-0801 MEDIUM 5.0 MITIGATE Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary fi
FAQ
How do I fix includer.cgi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is includer.cgi being exploited right now?
None of the tracked includer.cgi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which includer.cgi CVE should I patch first?
CVE-2005-0801 currently ranks highest (36/100): Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary fi.