PatchTheCVEsepcity vulnerabilities
Recent CVEs affecting sepcity products. 4 tracked.
sepcity has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-02-17. Highest priority: CVE-2008-6157 (score 58/100).
- CVE-2008-6157 HIGH 7.5 MITIGATE SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-de
- CVE-2008-6152 HIGH 7.5 MITIGATE SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute ar
- CVE-2008-6151 HIGH 7.5 MITIGATE SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbi
- CVE-2008-6150 HIGH 7.5 MITIGATE SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbit
FAQ
How do I fix sepcity vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sepcity being exploited right now?
None of the tracked sepcity CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sepcity CVE should I patch first?
CVE-2008-6157 currently ranks highest (58/100): SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-de.