GCVE - cpe:2.3:a:phpcomasy:phpcomasy:0.7.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpcomasy:phpcomasy:0.7.4:*:*:*:*:*:*:*

part: a version: 0.7.4 update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:sourceforge/phpcomasy`	purl2cpe	2026-06-01 10:12:00.758012

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-5827`	vulnerable	2026-06-08 04:49:21.391774	Details available Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpComasy CMS 0.7.9pre and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username or (2) password parameters. Published: 2006-11-10T01:00:00.000Z Updated: 2024-08-07T20:04:55.600Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1843 http://www.securityfocus.com/archive/1/450712 http://www.majorsecurity.de/index_2.php?major_rls=major_rls32 http://secunia.com/advisories/22760 http://www.securityfocus.com/bid/20938	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3744`	vulnerable	2026-06-08 04:48:41.956840	Details available SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php. Published: 2005-11-22T11:00:00.000Z Updated: 2024-08-07T23:24:36.413Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/15511 http://pridels0.blogspot.com/2005/11/phpcomasy-id-sql-injection.html http://www.vupen.com/english/advisories/2005/2507 http://www.osvdb.org/20984 http://secunia.com/advisories/17660	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.