PatchTheCVEtufat vulnerabilities
Recent CVEs affecting tufat products. 8 tracked.
tufat has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2010-08-25. Highest priority: CVE-2006-7032 (score 63/100).
- CVE-2010-1872 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers t
- CVE-2010-1055 MEDIUM 5.1 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic_quotes_gpc is disable
- CVE-2009-4978 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary file
- CVE-2009-4977 MEDIUM 6.5 DOWNGRADE PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to ex
- CVE-2008-6799 HIGH 7.5 DOWNGRADE connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain adminis
- CVE-2008-4738 HIGH 7.5 DOWNGRADE SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL co
- CVE-2007-3697 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attack
- CVE-2006-7032 HIGH 10.0 UPGRADE PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attacke
FAQ
How do I fix tufat vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tufat being exploited right now?
None of the tracked tufat CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tufat CVE should I patch first?
CVE-2006-7032 currently ranks highest (63/100): PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attacke.