Approved changes feed: RSS · Atom

cpe:2.3:a:roxlukas:lmeve:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRoxlukas (89fbd82d-5962-59bd-820a-7190ad88aad3)
ProductLmeve (d5af4dbc-bfe9-5871-b6ce-2aaf3ffc3f7e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/roxlukas/lmeve purl2cpe 2026-06-01 10:12:38.449043

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4246 vulnerable 2026-06-08 05:38:09.025219 roxlukas LMeve Login Page sql injection
MEDIUM (6.3)
A vulnerability was found in roxlukas LMeve and classified as critical. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument X-Forwarded-For leads to sql injection. The attack may be launched remotely. The name of the patch is 29e1ead3bb1c1fad53b77dfc14534496421c5b5d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216176.
Published: 2022-12-17T00:00:00.000Z
Updated: 2025-04-15T13:01:49.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25071 vulnerable 2026-06-08 05:11:29.309416 roxlukas LMeve proxy.php insert_log sql injection
MEDIUM (5.5)
A vulnerability was found in roxlukas LMeve up to 0.1.58. It has been rated as critical. Affected by this issue is the function insert_log of the file wwwroot/ccpwgl/proxy.php. The manipulation of the argument fetch leads to sql injection. Upgrading to version 0.1.59-beta is able to address this issue. The patch is identified as c25ff7fe83a2cda1fcb365b182365adc3ffae332. It is recommended to upgrade the affected component. VDB-217610 is the identifier assigned to this vulnerability.
Published: 2023-01-07T11:28:15.497Z
Updated: 2024-08-05T12:33:47.765Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.