Approved changes feed: RSS · Atom

cpe:2.3:a:arabless:saphplesson:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorArabless (e501197b-28ae-520b-a940-b38585cc2837)
ProductSaphplesson (ca4e7814-2dee-52f5-977f-93ffd7a36800)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/phpar/saphplesson purl2cpe 2026-06-01 10:13:17.851863

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2835 vulnerable 2026-06-08 04:49:07.649065 Details available
SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in add.php and (2) lessid parameter in show.php.
Published: 2006-06-06T20:03:00.000Z
Updated: 2024-08-07T18:06:26.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1720 vulnerable 2026-06-08 04:48:57.885997 Details available
Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML via the Word parameter. NOTE: it is possible that this issue is resultant from SQL injection.
Published: 2006-04-11T23:00:00.000Z
Updated: 2024-08-07T17:19:49.424Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1420 vulnerable 2026-06-08 04:48:57.166537 Details available
SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter.
Published: 2006-03-28T20:00:00.000Z
Updated: 2024-08-07T17:12:22.194Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.