Approved changes feed: RSS · Atom
cpe:2.3:a:ossigeno:cms:2.2_pre1:*:*:*:*:*:*:*
part: a version: 2.2_pre1 update: *
| Vendor | Ossigeno (f263835b-e854-5808-a7e9-0d7787408f10) |
|---|---|
| Product | Cms (5a862539-8119-5185-b20c-5291702fbaa6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/ossigeno |
purl2cpe | 2026-06-01 10:11:13.167279 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-6218 |
vulnerable | 2026-06-08 04:50:08.260663 |
Details available
Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) level parameter to (a) install_module.php and (b) uninstall_module.php in upload/xax/admin/modules/, (c) upload/xax/admin/patch/index.php, and (d) install_module.php and (e) uninstall_module.php in upload/xax/ossigeno/admin/; and the (2) ossigeno parameter to (f) ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php, different vectors than CVE-2007-5234.
Published: 2007-12-04T17:00:00.000Z
Updated: 2024-08-07T15:54:27.086Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.