Approved changes feed: RSS · Atom

cpe:2.3:a:olate:olatedownload:3.4.2:*:*:*:*:*:*:*

part: a version: 3.4.2 update: *

VendorOlate (62a2542d-5b3a-5e88-98bc-adc6e8b7e03d)
ProductOlatedownload (6e9b13a0-11b2-59a9-bcae-a82627029826)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/olate purl2cpe 2026-06-01 10:12:28.633554

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4541 vulnerable 2026-06-08 04:49:56.485669 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the PHP_SELF variable in modules/core/uim.php and (2) [url] tags in a comment in modules/core/fldm.php.
Published: 2007-08-27T21:00:00.000Z
Updated: 2024-08-07T15:01:09.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4540 vulnerable 2026-06-08 04:49:56.485189 Details available
Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute arbitrary SQL commands via the (1) HTTP_REFERER or (2) HTTP_USER_AGENT HTTP header.
Published: 2007-08-27T21:00:00.000Z
Updated: 2024-08-07T15:01:09.549Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.