Approved changes feed: RSS · Atom

cpe:2.3:a:innocms:innocms:0.3.1:*:*:*:*:*:*:*

part: a version: 0.3.1 update: *

VendorInnocms (fd5e50f9-7ad4-5064-a9b6-206ea0a38a42)
ProductInnocms (10c4c8ca-1eb1-5b1e-a7d1-603a41bc09b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/innocms/innocms purl2cpe 2026-06-01 10:11:07.575203

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7899 vulnerable 2026-06-08 06:58:23.866716 InnoCMS Backend edit code injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, has been found in InnoCMS 0.3.1. This issue affects some unknown processing of the file /panel/pages/1/edit of the component Backend. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-17T18:31:04.157Z
Updated: 2024-08-19T18:17:02.906Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.