Approved changes feed: RSS · Atom

cpe:2.3:a:verliadmin:verliadmin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVerliadmin (50fc27be-3a2f-5c76-a042-6b8818b8d4e2)
ProductVerliadmin (2f0b3c36-7e06-5337-8909-af3944f2e668)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/pld-linux/verliadmin purl2cpe 2026-06-01 10:11:24.903658

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-0098 vulnerable 2026-06-08 04:49:31.437013 Details available
Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php.
Published: 2007-01-05T18:00:00.000Z
Updated: 2024-08-07T12:03:37.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6668 vulnerable 2026-06-08 04:49:29.451173 Details available
Cross-site scripting (XSS) vulnerability in VerliAdmin 0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2006-12-20T23:00:00.000Z
Updated: 2024-08-07T20:33:59.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6667 vulnerable 2026-06-08 04:49:29.450893 Details available
Multiple SQL injection vulnerabilities in VerliAdmin 0.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) nick_mod or (2) nick parameter to (a) repass.php or (b) verify.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2006-12-20T23:00:00.000Z
Updated: 2024-08-07T20:33:59.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6666 vulnerable 2026-06-08 04:49:29.450546 Details available
PHP remote file inclusion vulnerability in index.php in VerliAdmin 0.3 and earlier allows remote authenticated users to execute arbitrary PHP code via a URL in the q parameter.
Published: 2006-12-20T23:00:00.000Z
Updated: 2024-08-07T20:33:59.673Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.