PatchTheCVEzoneo-soft vulnerabilities
Recent CVEs affecting zoneo-soft products. 2 tracked.
zoneo-soft has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2015-04-14. Highest priority: CVE-2014-8340 (score 51/100).
- CVE-2015-2926 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and earlier allow
- CVE-2014-8340 HIGH 7.5 UPGRADE SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote att
FAQ
How do I fix zoneo-soft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zoneo-soft being exploited right now?
None of the tracked zoneo-soft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zoneo-soft CVE should I patch first?
CVE-2014-8340 currently ranks highest (51/100): SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote att.