Approved changes feed: RSS · Atom

cpe:2.3:a:cxbsoft:url-shorting:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCxbsoft (4da10da7-92a1-5c3f-b422-fe2c44b6e81a)
ProductUrl Shorting (5f523bc2-e73d-5467-a619-9f312917ec00)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/cxb-soft/url-shorting purl2cpe 2026-06-01 10:13:25.071446

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0527 vulnerable 2026-06-08 06:22:01.287232 CXBSoft Url-shorting HTTP POST Request update_go.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in CXBSoft Url-shorting up to 1.3.1. This issue affects some unknown processing of the file /admin/pages/update_go.php of the component HTTP POST Request Handler. The manipulation of the argument version leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-250697 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-15T00:31:04.051Z
Updated: 2025-06-03T14:02:00.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0526 vulnerable 2026-06-08 06:22:01.286763 CXBSoft Url-shorting HTTP POST Request short_to_long.php sql injection
MEDIUM (5.5)
A vulnerability classified as critical was found in CXBSoft Url-shorting up to 1.3.1. This vulnerability affects unknown code of the file /pages/short_to_long.php of the component HTTP POST Request Handler. The manipulation of the argument shorturl leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250696. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-15T00:00:07.523Z
Updated: 2025-06-17T21:19:13.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0525 vulnerable 2026-06-08 06:22:01.286062 CXBSoft Url-shorting HTTP POST Request long_s_short.php sql injection
MEDIUM (5.5)
A vulnerability classified as critical has been found in CXBSoft Url-shorting up to 1.3.1. This affects an unknown part of the file /pages/long_s_short.php of the component HTTP POST Request Handler. The manipulation of the argument longurl leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250695. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-14T23:31:05.196Z
Updated: 2024-08-27T20:41:22.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0524 vulnerable 2026-06-08 06:22:01.285311 CXBSoft Url-shorting index.php sql injection
MEDIUM (5.5)
A vulnerability was found in CXBSoft Url-shorting up to 1.3.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument url leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250694 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-14T23:31:04.129Z
Updated: 2024-11-13T21:46:41.031Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.