Approved changes feed: RSS · Atom

cpe:2.3:a:scribe:scribe:0.2:*:*:*:*:*:*:*

part: a version: 0.2 update: *

VendorScribe (d4afff13-4a65-5298-af52-94318053988e)
ProductScribe (6cdf9e2f-aee0-5914-848c-1366e60acc12)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/scribe-org/scribe-ios purl2cpe 2026-06-01 10:13:12.765454

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-0822 vulnerable 2026-06-08 04:50:17.866433 Details available
Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. (dot dot) in the page parameter.
Published: 2008-02-19T20:00:00.000Z
Updated: 2024-08-07T08:01:39.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5823 vulnerable 2026-06-08 04:50:07.140382 Details available
Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the username parameter in a Register action.
Published: 2007-11-05T19:00:00.000Z
Updated: 2024-08-07T15:47:00.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5822 vulnerable 2026-06-08 04:50:07.139979 Details available
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.
Published: 2007-11-05T19:00:00.000Z
Updated: 2024-08-07T15:47:00.597Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.