PatchTheCVEweb-provence vulnerabilities
Recent CVEs affecting web-provence products. 4 tracked.
web-provence has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-09-09. Highest priority: CVE-2006-4656 (score 55/100).
- CVE-2006-4656 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 an
- CVE-2006-2015 LOW 2.6 DOWNGRADE Cross-site scripting (XSS) vulnerability in SL_site 1.0 allows remote attackers to inject arbitrary web script
- CVE-2006-2014 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in gallerie.php in SL_site 1.0 allows remote attackers to list images in arb
- CVE-2006-2013 HIGH 7.5 DOWNGRADE SQL injection vulnerability in page.php in SL_site 1.0 allows remote attackers to execute arbitrary SQL comman
FAQ
How do I fix web-provence vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is web-provence being exploited right now?
None of the tracked web-provence CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which web-provence CVE should I patch first?
CVE-2006-4656 currently ranks highest (55/100): PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 an.