PatchTheCVEreamday enterprises vulnerabilities
Recent CVEs affecting reamday enterprises products. 8 tracked.
reamday enterprises has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-03-02. Highest priority: CVE-2007-1141 (score 55/100).
- CVE-2007-1142 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary
- CVE-2007-1141 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to exe
- CVE-2006-4823 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in scripts/news_page.php in Reamday Enterprises Magic News Pro 1.0.3 a
- CVE-2006-0724 LOW 2.6 DOWNGRADE profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote atta
- CVE-2006-0723 LOW 2.6 DOWNGRADE PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when regi
- CVE-2006-0722 LOW 2.6 DOWNGRADE settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote att
- CVE-2006-0673 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magic_quotes_gpc dis
- CVE-2006-0157 MEDIUM 5.0 DOWNGRADE settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator
FAQ
How do I fix reamday enterprises vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is reamday enterprises being exploited right now?
None of the tracked reamday enterprises CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which reamday enterprises CVE should I patch first?
CVE-2007-1141 currently ranks highest (55/100): PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to exe.