PatchTheCVExcms vulnerabilities
Recent CVEs affecting xcms products. 3 tracked.
xcms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-01-04. Highest priority: CVE-2007-6652 (score 54/100).
- CVE-2007-6652 HIGH 7.5 UPGRADE cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote a
- CVE-2007-6604 MEDIUM 5.0 DOWNGRADE Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to r
- CVE-2007-5060 MEDIUM 4.3 MITIGATE Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in
FAQ
How do I fix xcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xcms being exploited right now?
None of the tracked xcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xcms CVE should I patch first?
CVE-2007-6652 currently ranks highest (54/100): cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote a.