Approved changes feed: RSS · Atom

cpe:2.3:a:olate:olatedownload:3.4.0:*:*:*:*:*:*:*

part: a version: 3.4.0 update: *

VendorOlate (62a2542d-5b3a-5e88-98bc-adc6e8b7e03d)
ProductOlatedownload (6e9b13a0-11b2-59a9-bcae-a82627029826)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/olate purl2cpe 2026-06-01 10:12:28.631296

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5145 vulnerable 2026-06-08 04:49:19.766414 Details available
Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.
Published: 2006-10-02T23:00:00.000Z
Updated: 2024-08-07T19:41:04.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5144 vulnerable 2026-06-08 04:49:19.766000 Details available
Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the description_small parameter.
Published: 2006-10-02T23:00:00.000Z
Updated: 2024-08-07T19:41:04.187Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.