Extreme Cms

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:extreme_cms:extreme_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorExtreme Cms (3faeda98-9074-53c2-a80e-f7a16b4e14ce)
ProductExtreme Cms (5455d111-950d-5b94-934c-0641ba25a647)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/extremecms purl2cpe 2026-06-01 10:12:29.720300

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5986 vulnerable 2026-06-08 04:49:21.760398 Details available
admin/options.php in Extreme CMS 0.9, and possibly earlier, does not require authentication, which might allow remote attackers to conduct unauthorized activities. NOTE: this issue can be combined with another vulnerability to expand the scope of a cross-site scripting (XSS) attack without authentication. NOTE: the provenance of this information is unknown; details are obtained from third party sources.
Published: 2006-11-20T21:00:00.000Z
Updated: 2024-08-07T20:12:31.004Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5985 vulnerable 2026-06-08 04:49:21.760010 Details available
Multiple cross-site scripting (XSS) vulnerabilities in admin/options.php in Extreme CMS 0.9, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) bg1, (2) bg2, (3) text, or (4) size parameters. NOTE: the provenance of this information is unknown; details are obtained from third party sources.
Published: 2006-11-20T21:00:00.000Z
Updated: 2024-08-07T20:12:31.063Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.