Approved changes feed: RSS · Atom

cpe:2.3:a:civic-cms:civic-cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCivic Cms (ee686061-d359-5591-96fc-5c98c80e20cf)
ProductCivic Cms (f7efde1f-3270-5926-a21c-12e56d383c0c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/civic-cms purl2cpe 2026-06-01 10:12:31.604280

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3849 vulnerable 2026-06-08 04:50:36.878722 Details available
Cross-site scripting (XSS) vulnerability in the calendar controller in Civic Website Manager before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving (1) month, (2) day, and (3) year fields.
Published: 2008-08-27T23:00:00.000Z
Updated: 2024-08-07T09:53:00.367Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.