Basic-Cms Sweetrice 0.6.7.1
Approved changes feed: RSS · Atom
cpe:2.3:a:basic-cms:sweetrice:0.6.7.1:*:*:*:*:*:*:*
part: a version: 0.6.7.1 update: *
| Vendor | Basic Cms (55924f52-ee2f-55e4-85c9-315f85e96c0d) |
|---|---|
| Product | Sweetrice (f4b568bf-5fb4-5393-bf26-cf48e547b935) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/sweetrice/sweetrice |
purl2cpe | 2026-06-01 10:11:18.374071 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-5318 |
vulnerable | 2026-06-08 04:56:32.726841 |
Details available
The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email parameter.
Published: 2015-01-03T11:00:00.000Z
Updated: 2024-09-16T17:47:50.970Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5317 |
vulnerable | 2026-06-08 04:56:32.726560 |
Details available
Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) the file_name parameter in an attachment action, (2) the post parameter in a show_comment action, (3) the sys-name parameter in an rssfeed action, or (4) the sys-name parameter in a view action.
Published: 2015-01-03T11:00:00.000Z
Updated: 2024-09-17T00:15:34.977Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5316 |
vulnerable | 2026-06-08 04:56:32.726206 |
Details available
Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web script or HTML via a top_height cookie.
Published: 2015-01-03T11:00:00.000Z
Updated: 2024-09-16T18:44:23.587Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.