PatchTheCVExqus vulnerabilities
Recent CVEs affecting xqus products. 4 tracked.
xqus has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2002-12-31. Highest priority: CVE-2002-1656 (score 55/100).
- CVE-2002-2046 HIGH 7.5 DOWNGRADE x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by ste
- CVE-2002-2045 MEDIUM 6.4 DOWNGRADE x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo
- CVE-2002-2044 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers
- CVE-2002-1656 HIGH 7.5 DOWNGRADE X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum
FAQ
How do I fix xqus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xqus being exploited right now?
None of the tracked xqus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xqus CVE should I patch first?
CVE-2002-1656 currently ranks highest (55/100): X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum .