PatchTheCVEsips vulnerabilities
Recent CVEs affecting sips products. 4 tracked.
sips has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-09-13. Highest priority: CVE-2002-0267 (score 56/100).
- CVE-2006-4733 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publis
- CVE-2003-1553 MEDIUM 4.3 DOWNGRADE Haakon Nilsen Simple Internet Publishing System (SIPS) 0.2.2 stores sensitive information under the web root w
- CVE-2002-2218 HIGH 10.0 MITIGATE CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple
- CVE-2002-0267 HIGH 10.0 DOWNGRADE preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain admin
FAQ
How do I fix sips vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sips being exploited right now?
None of the tracked sips CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sips CVE should I patch first?
CVE-2002-0267 currently ranks highest (56/100): preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain admin.