Approved changes feed: RSS · Atom
cpe:2.3:a:netoffice:dwins:1.3:*:*:*:*:*:*:*
part: a version: 1.3 update: *
| Vendor | Netoffice (239477fa-3717-51f9-be74-e03cdbbae72e) |
|---|---|
| Product | Dwins (d21e0503-4a6e-5998-a21b-b1caa8c8bddd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/netofficedwins |
purl2cpe | 2026-06-01 10:11:56.819652 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-2044 |
vulnerable | 2026-06-08 04:50:22.744211 |
Details available
includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the 'true' string literal instead of the true boolean literal, which allows remote attackers to bypass authentication and execute arbitrary code by setting this variable to 1, as demonstrated by uploading a PHP script via an add action to projects_site/uploadfile.php.
Published: 2008-05-01T17:20:00.000Z
Updated: 2024-08-07T08:49:56.920Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.