Approved changes feed: RSS · Atom

cpe:2.3:a:campware.org:campsite:3.3.0:rc1:*:*:*:*:*:*

part: a version: 3.3.0 update: rc1

VendorCampware.Org (7d13c89b-1de7-56c9-b5df-8fe305e622ad)
ProductCampsite (0a776419-095c-5ed5-b724-7c71c6652bb0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/campsite purl2cpe 2026-06-01 10:10:56.958409

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1867 vulnerable 2026-06-08 04:54:10.831961 Details available
SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
Published: 2010-05-07T22:00:00.000Z
Updated: 2024-08-07T01:35:53.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2183 vulnerable 2026-06-08 04:51:27.064448 Details available
Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter.
Published: 2009-06-23T21:21:00.000Z
Updated: 2024-08-07T05:44:55.205Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2182 vulnerable 2026-06-08 04:51:27.064164 Details available
Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/.
Published: 2009-06-23T21:21:00.000Z
Updated: 2024-08-07T05:44:55.290Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2181 vulnerable 2026-06-08 04:51:27.063783 Details available
Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter.
Published: 2009-06-23T21:21:00.000Z
Updated: 2024-08-07T05:44:55.155Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.