readymade video sharing script project vulnerabilities

Recent CVEs affecting readymade video sharing script project products. 5 tracked.

readymade video sharing script project has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-27. Highest priority: CVE-2017-17627 (score 65/100).

• CVE-2017-17893 MEDIUM 6.1 DOWNGRADE Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid para
• CVE-2017-17892 CRITICAL 9.8 DOWNGRADE Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php
• CVE-2017-17891 HIGH 8.8 DOWNGRADE Readymade Video Sharing Script has CSRF via user-profile-edit.php.
• CVE-2017-17649 MEDIUM 6.1 DOWNGRADE Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.
• CVE-2017-17627 CRITICAL 9.8 DOWNGRADE Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array param

FAQ

How do I fix readymade video sharing script project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is readymade video sharing script project being exploited right now?

None of the tracked readymade video sharing script project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which readymade video sharing script project CVE should I patch first?

CVE-2017-17627 currently ranks highest (65/100): Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array param.

Products

• readymade video sharing script

RSS feed for readymade video sharing script project · ← Back to latest CVEs