Yeager CMS 1.2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:yeager:yeager_cms:1.2.1:*:*:*:*:*:*:*part: a version: 1.2.1 update: *
| Vendor | Yeager (cbefa357-a745-5f53-aa31-60293292d16c) |
|---|---|
| Product | Yeager Cms (8132c778-780f-5c1b-82ce-01d887e00a89) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-7571 |
vulnerable | 2026-06-08 05:07:01.408260 |
Details available
Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
Published: 2017-08-07T20:00:00.000Z
Updated: 2024-08-06T07:51:28.812Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7570 |
vulnerable | 2026-06-08 05:07:01.407922 |
Details available
Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodb_lite/tests/test_adodb_lite.php, libs/org/adodb_lite/tests/test_datadictionary.php, or libs/org/adodb_lite/tests/test_adodb_lite_sessions.php.
Published: 2017-04-24T18:00:00.000Z
Updated: 2024-08-06T07:51:28.623Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7569 |
vulnerable | 2026-06-08 05:07:01.407584 |
Details available
SQL injection vulnerability in "yeager/y.php/tab_USERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary SQL commands via the "pagedir_orderby" parameter.
Published: 2017-04-24T18:00:00.000Z
Updated: 2024-08-06T07:51:28.519Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7568 |
vulnerable | 2026-06-08 05:07:01.407220 |
Details available
SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the account credentials of known users via the "userEmail" parameter.
Published: 2017-04-24T18:00:00.000Z
Updated: 2024-08-06T07:51:28.487Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7567 |
vulnerable | 2026-06-08 05:07:01.406747 |
Details available
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter.
Published: 2020-02-18T17:41:12.000Z
Updated: 2024-08-06T07:51:28.460Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.