PatchTheCVEscubez vulnerabilities
Recent CVEs affecting scubez products. 4 tracked.
scubez has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-13. Highest priority: CVE-2017-17111 (score 68/100).
- CVE-2017-17569 MEDIUM 6.1 MITIGATE Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.
- CVE-2017-17568 HIGH 7.5 MITIGATE Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (a
- CVE-2017-17567 HIGH 7.5 MITIGATE Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.
- CVE-2017-17111 CRITICAL 9.8 DOWNGRADE Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or
FAQ
How do I fix scubez vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is scubez being exploited right now?
None of the tracked scubez CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which scubez CVE should I patch first?
CVE-2017-17111 currently ranks highest (68/100): Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or .