Cotonti Siena
Approved changes feed: RSS · Atom
cpe:2.3:a:cotonti:cotonti_siena:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cotonti (8240ed9c-295f-5680-ad8e-8455e4f1384b) |
|---|---|
| Product | Cotonti Siena (1697d7dd-3ff5-5e07-a669-8112c913b820) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/dayver/cotonti |
purl2cpe | 2026-06-01 10:13:00.634456 |
pkg:github/cotonti/cotonti |
purl2cpe | 2026-06-01 10:13:00.634459 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-93869 |
vulnerable | 2026-10-13 12:28:56.220611 |
Cotonti through 1.0.0 Open Redirect via Unanchored cot_url_check() Regex
MEDIUM (6.1)
Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect destinations using a regular expression lacking an end-of-string anchor. Attackers can bypass the redirect guard by supplying hostnames beginning with the site domain to redirect users to attacker-controlled hosts through the ratings plugin or other redirect callers.
Published: 2026-09-18T19:56:35.457Z
Updated: 2026-09-24T14:23:17.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93871 |
vulnerable | 2026-10-13 12:28:56.202034 |
Cotonti through 1.0.0 Stored Open Redirect via Page redir: Prefix
MEDIUM (5.4)
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing authenticated users with page creation or edit permissions to store redirects to arbitrary external hosts. Attackers can craft pages on trusted domains that redirect visitors to malicious sites for phishing attacks without administrative privileges.
Published: 2026-09-18T19:56:36.840Z
Updated: 2026-09-24T14:23:19.827Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93868 |
vulnerable | 2026-10-13 12:28:56.067169 |
Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG
HIGH (8.1)
Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecover.php, creating a predictable token space of approximately one million values per second. Unauthenticated attackers can read the server Date header, precompute candidate tokens within a narrow time window, and probe them against the passrecover authentication endpoint to reset any account password including administrators.
Published: 2026-09-18T19:56:34.779Z
Updated: 2026-09-24T14:23:16.939Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93870 |
vulnerable | 2026-10-13 12:28:56.042521 |
Cotonti through 1.0.0 Cross-Site Request Forgery in the Ratings Plugin AJAX Handler
MEDIUM (4.3)
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users.
Published: 2026-09-18T19:56:36.178Z
Updated: 2026-09-24T14:23:18.856Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93872 |
vulnerable | 2026-10-13 12:28:55.944065 |
Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parameter
HIGH (7.5)
Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize() without allowed_classes restriction in the comments plugin EditAction. Registered users with comment write permissions can instantiate arbitrary PHP objects and potentially achieve file write or code execution through gadget chains.
Published: 2026-09-18T19:56:37.540Z
Updated: 2026-09-24T14:23:20.808Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93873 |
vulnerable | 2026-10-13 12:28:55.896356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-91939 |
vulnerable | 2026-09-16 04:32:55.451660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4789 |
vulnerable | 2026-06-08 05:04:49.676393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.