Approved changes feed: RSS · Atom

cpe:2.3:a:kasseler-cms:kasseler_cms:1.3.0:*:*:*:*:*:*:*

part: a version: 1.3.0 update: *

VendorKasseler Cms (1871149c-6413-538b-acf1-f97b5ff8f123)
ProductKasseler Cms (9e582bf6-fad9-5659-b2c0-e481799b5c8d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/robinck/kasseler purl2cpe 2026-06-01 10:12:34.888176

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3088 vulnerable 2026-06-08 04:50:32.997669 Details available
Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a Category action to index.php.
Published: 2008-07-09T19:00:00.000Z
Updated: 2024-08-07T09:28:40.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3087 vulnerable 2026-06-08 04:50:32.997291 Details available
Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to index.php, possibly related to the phpManual module.
Published: 2008-07-09T19:00:00.000Z
Updated: 2024-08-07T09:28:41.482Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.