nicephpscripts vulnerabilities

Recent CVEs affecting nicephpscripts products. 2 tracked.

nicephpscripts has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-10-31. Highest priority: CVE-2017-15988 (score 66/100).

• CVE-2017-15988 CRITICAL 9.8 MITIGATE Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability tha
• CVE-2017-15964 CRITICAL 9.8 MITIGATE Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.

FAQ

How do I fix nicephpscripts vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is nicephpscripts being exploited right now?

None of the tracked nicephpscripts CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which nicephpscripts CVE should I patch first?

CVE-2017-15988 currently ranks highest (66/100): Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability tha.

Products

• job board script
• nice php faq script

← Back to latest CVEs