GCVE - cpe:2.3:a:jpatokal:openflights:2024-08-20:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jpatokal:openflights:2024-08-20:*:*:*:*:*:*:*

part: a version: 2024-08-20 update: *

Vendor	Jpatokal (`fc01d9de-6d41-5c3c-91c6-f5dc3496bf73`)
Product	Openflights (`d6ed41aa-27eb-589b-89a9-c12c0453412d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/jpatokal/openflights`	purl2cpe	2026-06-01 10:12:37.077562

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-41348`	vulnerable	2026-06-08 06:43:54.440721	Details available openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php Published: 2024-08-29T00:00:00.000Z Updated: 2026-01-26T15:21:32.536Z Open on db.gcve.eu Reference links https://github.com/jpatokal/openflights/issues/1478 https://github.com/jpatokal/openflights/commit/e7f5d8112d5353cc1ceb6ae92aa5ff2f3c2e35a6 https://github.com/jpatokal/openflights/commit/d815df727a94fe98d3299873f0efddf6a81a56a3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41347`	vulnerable	2026-06-08 06:43:54.439921	Details available openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/settings.php Published: 2024-08-29T00:00:00.000Z Updated: 2026-01-26T15:24:53.467Z Open on db.gcve.eu Reference links https://github.com/jpatokal/openflights/issues/1477 https://github.com/jpatokal/openflights/commit/36733f430b11a78404457a5dfc295ab1182292c0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41346`	vulnerable	2026-06-08 06:43:54.427809	Details available openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/submit.php Published: 2024-08-29T00:00:00.000Z Updated: 2026-01-26T15:17:09.548Z Open on db.gcve.eu Reference links https://github.com/jpatokal/openflights/issues/1479 https://github.com/jpatokal/openflights/commit/36733f430b11a78404457a5dfc295ab1182292c0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41345`	vulnerable	2026-06-08 06:43:54.427253	Details available openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/trip.php Published: 2024-08-29T00:00:00.000Z Updated: 2026-01-26T15:06:17.735Z Open on db.gcve.eu Reference links https://github.com/jpatokal/openflights/issues/1480 https://github.com/jpatokal/openflights/commit/36733f430b11a78404457a5dfc295ab1182292c0	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Openflights

Notes

PURL mappings

Vulnerability references

Contribute