GCVE - cpe:2.3:a:softwarepublico:e-sic:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:softwarepublico:e-sic:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Softwarepublico (`292a8ee5-94e1-5e50-be8f-df739b474fad`)
Product	E Sic (`27510075-5c93-5b9b-b503-064a300397e7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:bitbucket/esiclivre/esiclivre`	purl2cpe	2026-06-01 10:17:07.460014
`pkg:github/carvalholeo/e-sic-livre`	purl2cpe	2026-06-01 10:17:07.460017
`pkg:github/thiagocapuano/e-sic-livre`	purl2cpe	2026-06-01 10:17:07.460019

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-15381`	vulnerable	2026-06-08 05:08:58.817496	db.gcve.eu details are currently unavailable. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15380`	vulnerable	2026-06-08 05:08:58.817219	db.gcve.eu details are currently unavailable. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15379`	vulnerable	2026-06-08 05:08:58.816910	Details available An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password. Published: 2017-10-23T08:00:00.000Z Updated: 2024-08-05T19:57:25.807Z Open on db.gcve.eu Reference links http://whiteboyz.xyz/esic-software-publico-autentication-bypass.html https://www.exploit-db.com/exploits/42980/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15378`	vulnerable	2026-06-08 05:08:58.816591	Details available SQL Injection exists in the E-Sic 1.0 password reset parameter (aka the cpfcnpj parameter to the /reset URI). Published: 2017-10-23T08:00:00.000Z Updated: 2024-08-05T19:57:25.505Z Open on db.gcve.eu Reference links http://whiteboyz.xyz/esic-software-publico-sql-injection.html https://www.exploit-db.com/exploits/42981/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15373`	vulnerable	2026-06-08 05:08:58.797994	Details available E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area). Published: 2017-10-16T04:00:00.000Z Updated: 2024-09-17T04:09:55.363Z Open on db.gcve.eu Reference links https://k33r0k.wordpress.com/2017/10/12/e-sic-sql-injection/ https://www.exploit-db.com/exploits/42979/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.