PatchTheCVEphp resource vulnerabilities
Recent CVEs affecting php resource products. 2 tracked.
php resource has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-10-15. Highest priority: CVE-2014-8294 (score 44/100).
- CVE-2014-8294 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arb
- CVE-2014-8293 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject a
FAQ
How do I fix php resource vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is php resource being exploited right now?
None of the tracked php resource CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which php resource CVE should I patch first?
CVE-2014-8294 currently ranks highest (44/100): Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arb.