PatchTheCVEthinkfactory vulnerabilities
Recent CVEs affecting thinkfactory products. 6 tracked.
thinkfactory has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2006-06-27. Highest priority: CVE-2006-3236 (score 44/100).
- CVE-2006-3236 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary
- CVE-2006-3157 MEDIUM 5.8 UPGRADE Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows r
- CVE-2006-3156 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attacker
- CVE-2006-3155 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers
- CVE-2006-3154 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute
- CVE-2006-3153 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attacker
FAQ
How do I fix thinkfactory vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is thinkfactory being exploited right now?
None of the tracked thinkfactory CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which thinkfactory CVE should I patch first?
CVE-2006-3236 currently ranks highest (44/100): Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary.