Approved changes feed: RSS · Atom
cpe:2.3:a:nophp_project:nophp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nophp Project (d8699a62-aafc-53b5-99a9-88d39ccb42bc) |
|---|---|
| Product | Nophp (78d294de-b197-51ad-b9f0-c0a27575be86) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/paijp/nophp |
purl2cpe | 2026-06-01 10:10:56.404709 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-28854 |
vulnerable | 2026-06-08 06:02:36.539525 |
nophp vulnerable to shell command injection on httpd user when sending a password-setting mail or mail-login mail
HIGH (8)
nophp is a PHP web framework. Prior to version 0.0.1, nophp is vulnerable to shell command injection on httpd user. A patch was made available at commit e5409aa2d441789cbb35f6b119bef97ecc3986aa on 2023-03-30. Users should update index.php to 2023-03-30 or later or, as a workaround, add a function such as `env_patchsample230330.php` to env.php.
Published: 2023-04-03T17:55:56.789Z
Updated: 2025-02-11T14:35:47.164Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.