PatchTheCVEninjadesigns vulnerabilities
Recent CVEs affecting ninjadesigns products. 4 tracked.
ninjadesigns has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-04-29. Highest priority: CVE-2009-1486 (score 52/100).
- CVE-2009-1486 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execu
- CVE-2009-0571 MEDIUM 5.0 DOWNGRADE admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficie
- CVE-2009-0570 MEDIUM 5.1 DOWNGRADE Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when register_globals is enabled a
- CVE-2009-0325 MEDIUM 4.3 DOWNGRADE Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, a
FAQ
How do I fix ninjadesigns vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ninjadesigns being exploited right now?
None of the tracked ninjadesigns CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ninjadesigns CVE should I patch first?
CVE-2009-1486 currently ranks highest (52/100): Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execu.