Approved changes feed: RSS · Atom

cpe:2.3:a:campware.org:campsite:2.6.1:*:*:*:*:*:*:*

part: a version: 2.6.1 update: *

VendorCampware.Org (7d13c89b-1de7-56c9-b5df-8fe305e622ad)
ProductCampsite (0a776419-095c-5ed5-b724-7c71c6652bb0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/campsite purl2cpe 2026-06-01 10:10:56.947274

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1867 vulnerable 2026-06-08 04:54:10.824398 Details available
SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
Published: 2010-05-07T22:00:00.000Z
Updated: 2024-08-07T01:35:53.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5912 vulnerable 2026-06-08 04:49:21.631360 Details available
Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-what," possibly related to encrypted passwords.
Published: 2006-11-15T15:00:00.000Z
Updated: 2024-09-16T18:04:11.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5911 vulnerable 2026-06-08 04:49:21.630974 Details available
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/.
Published: 2006-11-15T15:00:00.000Z
Updated: 2024-08-07T20:12:30.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5910 vulnerable 2026-06-08 04:49:21.629659 Details available
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/.
Published: 2006-11-15T15:00:00.000Z
Updated: 2024-08-07T20:12:30.515Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.