Approved changes feed: RSS · Atom

cpe:2.3:a:justin_hagstrom:autoindex_php_script:2.1.1:*:*:*:*:*:*:*

part: a version: 2.1.1 update: *

VendorJustin Hagstrom (57612636-cf07-5d3e-bba0-4e71ff8a842c)
ProductAutoindex Php Script (6121fda8-33ae-5b02-91c0-4c9d277ab25b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/justinhagstrom/autoindex purl2cpe 2026-06-01 10:11:14.837472

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5984 vulnerable 2026-06-08 04:50:07.416479 Details available
classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."
Published: 2007-11-15T00:00:00.000Z
Updated: 2024-08-07T15:47:00.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5983 vulnerable 2026-06-08 04:50:07.413749 Details available
Cross-site scripting (XSS) vulnerability in index.php in Justin Hagstrom AutoIndex PHP Script before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).
Published: 2007-11-15T00:00:00.000Z
Updated: 2024-08-07T15:47:00.837Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.