PatchTheCVEniclor vulnerabilities
Recent CVEs affecting niclor products. 2 tracked.
niclor has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-05-07. Highest priority: CVE-2008-6290 (score 49/100).
- CVE-2008-6795 HIGH 7.5 MITIGATE SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arb
- CVE-2008-6290 MEDIUM 6.8 MITIGATE Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic
FAQ
How do I fix niclor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is niclor being exploited right now?
None of the tracked niclor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which niclor CVE should I patch first?
CVE-2008-6290 currently ranks highest (49/100): Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic.