PatchTheCVEphpstore vulnerabilities
Recent CVEs affecting phpstore products. 6 tracked.
phpstore has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-08-11. Highest priority: CVE-2008-6931 (score 50/100).
- CVE-2008-6931 MEDIUM 6.5 MITIGATE Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated use
- CVE-2008-6930 MEDIUM 6.5 MITIGATE Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute ar
- CVE-2008-6929 MEDIUM 6.5 MITIGATE Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execu
- CVE-2008-6928 MEDIUM 6.5 MITIGATE Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to e
- CVE-2008-5493 HIGH 7.5 MITIGATE MITIGATE SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to exe
- CVE-2008-5490 HIGH 7.5 MITIGATE SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrar
FAQ
How do I fix phpstore vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpstore being exploited right now?
None of the tracked phpstore CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpstore CVE should I patch first?
CVE-2008-6931 currently ranks highest (50/100): Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated use.