Approved changes feed: RSS · Atom
cpe:2.3:a:contenido:contendio:4.6.0:*:*:*:*:*:*:*
part: a version: 4.6.0 update: *
| Vendor | Contenido (cc48c334-c64b-5aaa-a69e-13122465b52c) |
|---|---|
| Product | Contendio (7b6998bc-6cdd-5a14-8a9e-0406c87e272a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/contenido/contenido |
purl2cpe | 2026-06-01 10:12:35.664144 |
pkg:sourceforge/contenidocms |
purl2cpe | 2026-06-01 10:12:35.664146 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-5381 |
vulnerable | 2026-06-08 04:49:20.386332 |
Details available
Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysqli.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, (7) db_pgsql.inc, or (8) db_sybase.inc in the conlib/ directory.
Published: 2006-10-18T10:00:00.000Z
Updated: 2024-08-07T19:48:30.344Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4132 |
vulnerable | 2026-06-08 04:48:43.021459 |
Details available
Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is true, has unspecified impact and attack vectors. NOTE: it is likely that this is a PHP remote file include vulnerability.
Published: 2005-12-09T11:00:00.000Z
Updated: 2024-08-07T23:31:49.066Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.