Approved changes feed: RSS · Atom

cpe:2.3:a:owl:intranet_knowledgebase:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOwl (a828e13a-7f08-5dfc-b5a2-30529fff5ecc)
ProductIntranet Knowledgebase (33027dba-b345-5a94-bc8f-6cd77145c62b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/doxbox/doxbox-dms purl2cpe 2026-06-01 10:11:30.636260

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3359 vulnerable 2026-06-08 04:50:34.373331 Details available
SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2008-07-29T18:00:00.000Z
Updated: 2024-08-07T09:37:26.575Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3100 vulnerable 2026-06-08 04:50:33.021601 Details available
Cross-site scripting (XSS) vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php.
Published: 2008-07-29T18:00:00.000Z
Updated: 2024-08-07T09:28:40.474Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.