PatchTheCVEinterworx vulnerabilities
Recent CVEs affecting interworx products. 2 tracked.
interworx has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2014-10-21. Highest priority: CVE-2014-2531 (score 44/100).
- CVE-2014-2531 MEDIUM 6.5 UPGRADE SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and
- CVE-2014-2035 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Cont
FAQ
How do I fix interworx vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is interworx being exploited right now?
None of the tracked interworx CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which interworx CVE should I patch first?
CVE-2014-2531 currently ranks highest (44/100): SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and.