Approved changes feed: RSS · Atom
cpe:2.3:a:pedro_lineu_orso:sarg:2.2.4:*:*:*:*:*:*:*
part: a version: 2.2.4 update: *
| Vendor | Pedro Lineu Orso (68a40e6e-2761-5ca4-b829-b46cd56a2cba) |
|---|---|
| Product | Sarg (01726a35-10fe-5574-85f3-ccabd403318c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/sarg |
purl2cpe | 2026-06-01 10:13:13.500929 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-7250 |
vulnerable | 2026-06-08 04:51:06.214041 |
Details available
Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.4 allows remote attackers to inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: this issue exists because of an incomplete fix for CVE-2008-1168.
Published: 2009-12-30T22:00:00.000Z
Updated: 2024-09-16T22:35:57.637Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7249 |
vulnerable | 2026-06-08 04:51:06.213658 |
Details available
Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.
Published: 2009-12-30T22:00:00.000Z
Updated: 2024-08-07T11:56:14.540Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.