phpgraphy vulnerabilities
Recent CVEs affecting phpgraphy products. 2 tracked.
phpgraphy has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-02-04. Highest priority: CVE-2006-6966 (score 53/100).
- CVE-2006-6966 HIGH 7.5 UPGRADE phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter wi
- CVE-2005-2735 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arb
FAQ
How do I fix phpgraphy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpgraphy being exploited right now?
None of the tracked phpgraphy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpgraphy CVE should I patch first?
CVE-2006-6966 currently ranks highest (53/100): phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter wi.