Approved changes feed: RSS · Atom

cpe:2.3:a:olate:olatedownload:3.4.1:*:*:*:*:*:*:*

part: a version: 3.4.1 update: *

VendorOlate (62a2542d-5b3a-5e88-98bc-adc6e8b7e03d)
ProductOlatedownload (6e9b13a0-11b2-59a9-bcae-a82627029826)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/olate purl2cpe 2026-06-01 10:12:28.632451

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4454 vulnerable 2026-06-08 04:49:56.336906 Details available
Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the (1) PDO::ATTR_SERVER_VERSION or (2) PDO::ATTR_CLIENT_VERSION attribute.
Published: 2007-08-21T18:00:00.000Z
Updated: 2024-08-07T14:53:56.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4421 vulnerable 2026-06-08 04:49:56.289246 Details available
SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3_AutoLogin cookie.
Published: 2007-08-18T21:00:00.000Z
Updated: 2024-08-07T14:53:55.831Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4419 vulnerable 2026-06-08 04:49:56.287544 Details available
Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area.
Published: 2007-08-18T21:00:00.000Z
Updated: 2024-08-07T14:53:56.165Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.