PatchTheCVEmy little homepage vulnerabilities
Recent CVEs affecting my little homepage products. 8 tracked.
my little homepage has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-05-31. Highest priority: CVE-2007-2942 (score 52/100).
- CVE-2007-2942 HIGH 7.5 UPGRADE SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute
- CVE-2007-2103 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in my little forum 1.7 allow remote attackers to execute ar
- CVE-2007-2102 MEDIUM 6.8 MITIGATE Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject a
- CVE-2006-6087 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject a
- CVE-2006-0473 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little
- CVE-2006-0472 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in guestbook.php in my little homepage my little guestbook, as last m
- CVE-2006-0471 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the bbcode function in functions.php in my little homepage my litt
- CVE-2005-3045 HIGH 7.5 DOWNGRADE SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execu
FAQ
How do I fix my little homepage vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is my little homepage being exploited right now?
None of the tracked my little homepage CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which my little homepage CVE should I patch first?
CVE-2007-2942 currently ranks highest (52/100): SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute .