PatchTheCVEscripts4you vulnerabilities
Recent CVEs affecting scripts4you products. 4 tracked.
scripts4you has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-12-01. Highest priority: CVE-2008-5288 (score 52/100).
- CVE-2008-5290 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attac
- CVE-2008-5289 HIGH 7.5 DOWNGRADE SQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execu
- CVE-2008-5288 MEDIUM 6.8 DOWNGRADE PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when regist
- CVE-2008-5287 HIGH 7.5 DOWNGRADE SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to ex
FAQ
How do I fix scripts4you vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is scripts4you being exploited right now?
None of the tracked scripts4you CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which scripts4you CVE should I patch first?
CVE-2008-5288 currently ranks highest (52/100): PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when regist.