Approved changes feed: RSS · Atom

cpe:2.3:a:contenido:contendio:4.6.15:*:*:*:*:*:*:*

part: a version: 4.6.15 update: *

VendorContenido (cc48c334-c64b-5aaa-a69e-13122465b52c)
ProductContendio (7b6998bc-6cdd-5a14-8a9e-0406c87e272a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/contenido/contenido purl2cpe 2026-06-01 10:12:35.665805
pkg:sourceforge/contenidocms purl2cpe 2026-06-01 10:12:35.665807

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5380 vulnerable 2026-06-08 04:49:20.384062 Details available
Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path parameter to (1) cms/dbfs.php or (2) cms/front_content.php. NOTE: CVE disputes this issue for version 4.6.15, because $contenido_path is set to a static value
Published: 2006-10-18T10:00:00.000Z
Updated: 2024-08-07T19:48:30.309Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.