uapplication vulnerabilities
Recent CVEs affecting uapplication products. 10 tracked.
uapplication has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-02-07. Highest priority: CVE-2005-1427 (score 51/100).
- CVE-2007-0815 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in images_archive.asp in Uapplication Uphotogallery 1.1 allows remote
- CVE-2007-0799 HIGH 7.5 DOWNGRADE SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary
- CVE-2007-0798 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arb
- CVE-2006-6247 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arb
- CVE-2006-3023 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and ea
- CVE-2006-2246 MEDIUM 5.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitra
- CVE-2005-2010 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inj
- CVE-2005-1427 HIGH 7.5 MITIGATE Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to o
- CVE-2005-1425 MEDIUM 5.0 DOWNGRADE Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control,
- CVE-2005-0938 MEDIUM 5.0 DOWNGRADE Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to rea
FAQ
How do I fix uapplication vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is uapplication being exploited right now?
None of the tracked uapplication CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which uapplication CVE should I patch first?
CVE-2005-1427 currently ranks highest (51/100): Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to o.