Kasseler Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:kasseler-cms:kasseler-cms:*:r1223:*:*:*:*:*:*
part: a version: * update: r1223
| Vendor | Kasseler Cms (1871149c-6413-538b-acf1-f97b5ff8f123) |
|---|---|
| Product | Kasseler Cms (7d363697-0bd3-5b59-96ec-11dce5e7d1ac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/robinck/kasseler |
purl2cpe | 2026-06-01 10:12:34.893492 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-3729 |
vulnerable | 2026-06-08 05:04:32.732576 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the (1) groups[] parameter in a send action in the sendmail module or (2) query parameter in a sql_query action in the database module to admin.php, related to CVE-2013-3727.
Published: 2014-03-13T14:00:00.000Z
Updated: 2024-08-06T16:22:00.179Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3728 |
vulnerable | 2026-06-08 05:04:32.732176 |
Details available
Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categories to inject arbitrary web script or HTML via the cat parameter in an admin_new_category action to admin.php.
Published: 2014-03-13T14:00:00.000Z
Updated: 2024-08-06T16:21:59.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3727 |
vulnerable | 2026-06-08 05:04:32.731486 |
Details available
SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the groups[] parameter to admin.php. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.
Published: 2014-03-13T14:00:00.000Z
Updated: 2024-08-06T16:22:01.474Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.