Approved changes feed: RSS · Atom
cpe:2.3:a:papoo:papoo:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Papoo (ac1904ef-3231-5588-9492-f577dc9e152d) |
|---|---|
| Product | Papoo (27f41769-ae70-5335-a3d0-8017fad822fa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/papoosoftware/papoocms |
purl2cpe | 2026-06-01 10:13:12.711666 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3724 |
vulnerable | 2026-06-08 04:50:36.194731 |
Details available
SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter.
Published: 2008-08-20T16:00:00.000Z
Updated: 2024-08-07T09:53:00.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3494 |
vulnerable | 2026-06-08 04:49:54.098367 |
Details available
Papoo CMS 3.6, and possibly earlier, does not verify user privileges when accessing the backend administration plugins, which allows remote authenticated users to (1) read the entire database by accessing the database backup plugin via a devtools/templates/newdump_backend.html argument in the template parameter to interna/plugin.php, (2) create plugins, (3) remove plugins, (4) enable debug mode, and have other unspecified impact.
Published: 2007-06-29T18:00:00.000Z
Updated: 2024-08-07T14:21:36.413Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3453 |
vulnerable | 2026-06-08 04:49:54.034762 |
Details available
SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the selmenuid parameter to certain components.
Published: 2007-06-27T00:00:00.000Z
Updated: 2024-08-07T14:21:34.868Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2320 |
vulnerable | 2026-06-08 04:49:44.641622 |
Details available
SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478.
Published: 2007-04-26T21:00:00.000Z
Updated: 2024-08-07T13:33:28.316Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3572 |
vulnerable | 2026-06-08 04:49:09.688077 |
Details available
SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary SQL commands via the msgid parameter.
Published: 2006-07-13T01:00:00.000Z
Updated: 2024-08-07T18:30:34.385Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1766 |
vulnerable | 2026-06-08 04:48:58.007750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0569 |
vulnerable | 2026-06-08 04:48:54.531824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4478 |
vulnerable | 2026-06-08 04:48:43.978037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.