Approved changes feed: RSS · Atom

cpe:2.3:a:denkgroot:spina:2.18.0:*:*:*:*:*:*:*

part: a version: 2.18.0 update: *

VendorDenkgroot (eb41b7fb-c0bd-542d-8f0b-1057142f7300)
ProductSpina (fb73c7e7-b81a-59e6-a357-56c1afbaf2bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/denkgroot/spina purl2cpe 2026-06-01 10:12:50.598378

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7106 vulnerable 2026-06-08 06:58:21.272563 Spina CMS media_folders cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown functionality of the file /admin/media_folders. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272431. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-07-25T21:00:06.267Z
Updated: 2024-08-01T21:52:30.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41603 vulnerable 2026-06-08 06:43:54.739821 Details available
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout.
Published: 2024-07-19T00:00:00.000Z
Updated: 2024-08-02T04:46:52.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41602 vulnerable 2026-06-08 06:43:54.739438 Details available
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL
Published: 2024-07-19T00:00:00.000Z
Updated: 2024-08-02T04:46:52.378Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.