PatchTheCVEsitos vulnerabilities
Recent CVEs affecting sitos products. 6 tracked.
sitos has 6 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-10-07. Highest priority: CVE-2019-15751 (score 62/100).
- CVE-2019-15751 CRITICAL 9.8 DOWNGRADE An unrestricted file upload vulnerability in SITOS six Build v6.2.1 allows remote attackers to execute arbitra
- CVE-2019-15750 MEDIUM 6.1 DOWNGRADE A Cross-Site Scripting (XSS) vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attack
- CVE-2019-15749 MEDIUM 6.5 DOWNGRADE SITOS six Build v6.2.1 allows a user to change their password and recovery email address without requiring the
- CVE-2019-15748 CRITICAL 9.8 DOWNGRADE SITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by browsing direct
- CVE-2019-15747 HIGH 8.8 DOWNGRADE SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to
- CVE-2019-15746 CRITICAL 9.8 DOWNGRADE SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands
FAQ
How do I fix sitos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sitos being exploited right now?
None of the tracked sitos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sitos CVE should I patch first?
CVE-2019-15751 currently ranks highest (62/100): An unrestricted file upload vulnerability in SITOS six Build v6.2.1 allows remote attackers to execute arbitra.