GCVE - cpe:2.3:a:denkgroot:spina:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:denkgroot:spina:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Denkgroot (`eb41b7fb-c0bd-542d-8f0b-1057142f7300`)
Product	Spina (`fb73c7e7-b81a-59e6-a357-56c1afbaf2bf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/denkgroot/spina`	purl2cpe	2026-06-01 10:12:50.598335

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-7106`	vulnerable	2026-06-08 06:58:21.272743	Spina CMS media_folders cross-site request forgery MEDIUM (4.3) A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown functionality of the file /admin/media_folders. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272431. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-07-25T21:00:06.267Z Updated: 2024-08-01T21:52:30.941Z Open on db.gcve.eu Reference links https://vuldb.com/?id.272431 https://vuldb.com/?ctiid.272431 https://vuldb.com/?submit.376769 https://github.com/topsky979/Security-Collections/blob/main/cve3/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7065`	vulnerable	2026-06-08 06:58:21.148558	Spina CMS cross-site request forgery MEDIUM (4.3) A vulnerability was found in Spina CMS up to 2.18.0. It has been classified as problematic. Affected is an unknown function of the file /admin/pages/. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272346 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-07-24T09:31:03.848Z Updated: 2024-08-01T21:52:30.804Z Open on db.gcve.eu Reference links https://vuldb.com/?id.272346 https://vuldb.com/?ctiid.272346 https://vuldb.com/?submit.375236 https://github.com/topsky979/Security-Collections/blob/main/1700810/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41602`	vulnerable	2026-06-08 06:43:54.738077	Details available Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL Published: 2024-07-19T00:00:00.000Z Updated: 2024-08-02T04:46:52.378Z Open on db.gcve.eu Reference links https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41602	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3445`	vulnerable	2026-06-08 06:09:39.576821	Cross-site Scripting (XSS) - Stored in spinacms/spina LOW (3.5) Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1. Published: 2023-06-28T13:22:48.106Z Updated: 2024-11-06T20:22:53.327Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/18a74a9d-4a2d-4bf8-ae62-56a909427070 https://github.com/spinacms/spina/commit/9adfe7b4807b3cc10dbb7351a26cc32f5d8c14a3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-4619`	vulnerable	2026-06-08 05:06:40.270778	Details available Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75. Published: 2017-09-07T20:00:00.000Z Updated: 2024-08-06T06:18:12.032Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/75216 http://www.openwall.com/lists/oss-security/2015/06/16/20 https://github.com/denkGroot/Spina/commit/bfe44f289e336f80b6593032679300c493735e75	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Spina

Notes

PURL mappings

Vulnerability references

Contribute