GCVE - cpe:2.3:a:etomite:etomite:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:etomite:etomite:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Etomite (`44fe82a5-099b-598f-bff9-17a8109daa79`)
Product	Etomite (`c7de4670-e40b-5e52-a6c0-0c0ad6abf4b5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/rasel-sk/etomite`	purl2cpe	2026-06-01 10:13:01.518849

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4264`	vulnerable	2026-06-08 04:59:30.026685	Details available Cross-site scripting (XSS) vulnerability in Etomite before 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-12-08T11:00:00.000Z Updated: 2024-09-16T19:35:03.920Z Open on db.gcve.eu Reference links http://jvndb.jvn.jp/jvndb/JVNDB-2011-000101 http://jvn.jp/en/jp/JVN04329324/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7070`	vulnerable	2026-06-08 04:49:30.306533	Details available Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier allows remote attackers to upload and execute arbitrary files via an nfile[] parameter with a filename that contains a .php extension followed by a valid image extension such as .gif or .jpg, then calling the rename function. Published: 2007-02-27T18:00:00.000Z Updated: 2024-08-07T20:50:06.098Z Open on db.gcve.eu Reference links http://secunia.com/advisories/21208 http://www.securityfocus.com/bid/19157 http://securitytracker.com/id?1016593 http://www.securityfocus.com/archive/1/441202/100/0/threaded https://www.exploit-db.com/exploits/2072	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5242`	vulnerable	2026-06-08 04:49:20.121104	Details available SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Published: 2006-10-12T00:00:00.000Z Updated: 2024-08-07T19:41:05.764Z Open on db.gcve.eu Reference links http://secunia.com/advisories/22217 http://www.vupen.com/english/advisories/2006/3975 http://www.etomite.org/forums/index.php?showtopic=6095 http://www.securityfocus.com/bid/20449	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3904`	vulnerable	2026-06-08 04:49:10.426273	Details available SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. Published: 2006-07-27T22:00:00.000Z Updated: 2024-08-07T18:48:39.286Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19150 http://www.etomite.org/forums/index.php?showtopic=5706&st=0&p=35307&#entry35307 http://secunia.com/advisories/21167 http://www.vupen.com/english/advisories/2006/2961 https://www.exploit-db.com/exploits/2071	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0325`	vulnerable	2026-06-08 04:48:53.387077	Details available Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter. Published: 2006-01-20T21:00:00.000Z Updated: 2024-08-07T16:34:13.609Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/16336 http://secunia.com/advisories/18556 http://www.vupen.com/english/advisories/2006/0283 http://www.etomite.org/forums/index.php?showtopic=4185 http://www.osvdb.org/22693	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Etomite

Notes

PURL mappings

Vulnerability references

Contribute