PatchTheCVEmzbservices vulnerabilities
Recent CVEs affecting mzbservices products. 2 tracked.
mzbservices has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-02-03. Highest priority: CVE-2009-0383 (score 49/100).
- CVE-2009-0409 MEDIUM 6.8 DOWNGRADE SQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when magic_quotes_gpc is disabl
- CVE-2009-0383 MEDIUM 6.4 DOWNGRADE delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitr
FAQ
How do I fix mzbservices vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mzbservices being exploited right now?
None of the tracked mzbservices CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mzbservices CVE should I patch first?
CVE-2009-0383 currently ranks highest (49/100): delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitr.