Approved changes feed: RSS · Atom
cpe:2.3:a:kreotek:phpbms:0.96:*:*:*:*:*:*:*part: a version: 0.96 update: *
| Vendor | Kreotek (bc56feb8-5f0e-58cd-be7b-d39bdb0e582f) |
|---|---|
| Product | Phpbms (e7ddd782-4e84-59ce-a1c2-613d3d6908ef) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/weex/phpbms |
purl2cpe | 2026-06-01 10:13:14.318559 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-3756 |
vulnerable | 2026-06-08 04:51:44.146921 |
Details available
phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, and (4) choicelist.php, which reveals the installation path in an error message.
Published: 2009-10-22T17:00:00.000Z
Updated: 2024-08-07T06:38:30.301Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3755 |
vulnerable | 2026-06-08 04:51:44.146546 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php and (2) modules\base\myaccount.php; and the PATH_INFO to (3) modules_view.php, (4) tabledefs_options.php, and (5) adminsettings.php in phpbms\modules\base\.
Published: 2009-10-22T17:00:00.000Z
Updated: 2024-08-07T06:38:30.286Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3754 |
vulnerable | 2026-06-08 04:51:44.146041 |
Details available
Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to modules/bms/invoices_discount_ajax.php, (2) f parameter to dbgraphic.php, and (3) tid parameter in a show action to advancedsearch.php.
Published: 2009-10-22T17:00:00.000Z
Updated: 2024-08-07T06:38:30.346Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.