GCVE - cpe:2.3:a:saphp:saphplesson:1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:saphp:saphplesson:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

Vendor	Saphp (`c8b9ea73-f1ae-5d19-9c31-e70321e35519`)
Product	Saphplesson (`3191fecf-e830-5f0c-a542-cfcc6fcefb3d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/phpar/saphplesson`	purl2cpe	2026-06-01 10:11:11.376790

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-3161`	vulnerable	2026-06-08 04:49:08.474833	Details available SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the action parameter. Published: 2006-06-22T22:00:00.000Z Updated: 2024-08-07T18:16:05.966Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1016342 http://securityreason.com/securityalert/1123 http://www.securityfocus.com/archive/1/437659/100/0/threaded http://www.securityfocus.com/bid/18501 https://exchange.xforce.ibmcloud.com/vulnerabilities/27304	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3363`	vulnerable	2026-06-08 04:48:40.498170	Details available SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in (1) showcat.php and (2) add.php. Published: 2005-10-29T19:00:00.000Z Updated: 2024-08-07T23:10:08.543Z Open on db.gcve.eu Reference links http://secunia.com/advisories/17308/ http://securityreason.com/securityalert/111 http://www.securityfocus.com/archive/1/430906/30/5610/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/22861 http://www.securityfocus.com/bid/15185	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.