PatchTheCVEphpweather vulnerabilities
Recent CVEs affecting phpweather products. 2 tracked.
phpweather has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-12-30. Highest priority: CVE-2008-5771 (score 52/100).
- CVE-2008-5771 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and exec
- CVE-2008-5770 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attacker
FAQ
How do I fix phpweather vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpweather being exploited right now?
None of the tracked phpweather CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpweather CVE should I patch first?
CVE-2008-5771 currently ranks highest (52/100): Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and exec.