GCVE - cpe:2.3:a:travianz_project:travianz:8.3.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:travianz_project:travianz:8.3.4:*:*:*:*:*:*:*

part: a version: 8.3.4 update: *

Vendor	Travianz Project (`66f1be39-e478-59a5-96cd-eb25fc7bd1db`)
Product	Travianz (`7d0a687e-2c28-5f4a-abad-16b1b67e4d56`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/shadowss/travianz`	purl2cpe	2026-06-01 10:12:59.590104

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-36994`	vulnerable	2026-06-08 06:08:14.754233	Details available In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the server configuration and inject PHP code. Published: 2023-07-07T00:00:00.000Z Updated: 2024-11-13T20:55:10.166Z Open on db.gcve.eu Reference links https://bramdoessecurity.com/travianz-hacked/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36993`	vulnerable	2026-06-08 06:08:14.753619	Details available The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts. Published: 2023-07-07T00:00:00.000Z Updated: 2024-11-13T20:55:56.204Z Open on db.gcve.eu Reference links https://bramdoessecurity.com/travianz-hacked/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36992`	vulnerable	2026-06-08 06:08:14.753210	Details available PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code. Published: 2023-07-07T00:00:00.000Z Updated: 2024-11-13T20:57:49.410Z Open on db.gcve.eu Reference links https://bramdoessecurity.com/travianz-hacked/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.