PatchTheCVEopen-realty vulnerabilities
Recent CVEs affecting open-realty products. 5 tracked.
open-realty has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2012-09-06. Highest priority: CVE-2007-5056 (score 53/100).
- CVE-2012-1112 MEDIUM 6.8 UPGRADE Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and
- CVE-2011-3765 MEDIUM 5.0 DOWNGRADE Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file,
- CVE-2007-5056 MEDIUM 6.8 UPGRADE MITIGATE Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products
- CVE-2007-0490 MEDIUM 5.0 DOWNGRADE index.php in Open-Realty 2.3.4 allows remote attackers to obtain sensitive information (the full path) via an
- CVE-2006-3148 HIGH 7.5 DOWNGRADE SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execu
FAQ
How do I fix open-realty vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is open-realty being exploited right now?
None of the tracked open-realty CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which open-realty CVE should I patch first?
CVE-2007-5056 currently ranks highest (53/100): Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products .