GCVE - cpe:2.3:a:uebimiau:uebimiau:2.7.9:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:uebimiau:uebimiau:2.7.9:*:*:*:*:*:*:*

part: a version: 2.7.9 update: *

Vendor	Uebimiau (`48069962-59d6-54bf-8f38-7b1c79a96673`)
Product	Uebimiau (`07616439-2f85-511f-afb6-0afd0e10dd1f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:sourceforge/uebimiau`	purl2cpe	2026-06-01 10:13:29.008487

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-5235`	vulnerable	2026-06-08 04:50:04.663310	Details available Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject arbitrary web script or HTML via the f_email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2007-10-06T00:00:00.000Z Updated: 2024-08-07T15:24:42.130Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/25912 http://osvdb.org/39898	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3172`	vulnerable	2026-06-08 04:49:53.390290	Details available Directory traversal vulnerability in demo/pop3/error.php in Uebimiau Webmail allows remote attackers to determine the existence of arbitrary directories via an absolute pathname and .. (dot dot) in the selected_theme parameter. Published: 2007-06-11T22:00:00.000Z Updated: 2024-08-07T14:05:29.236Z Open on db.gcve.eu Reference links http://osvdb.org/38337 http://www.securityfocus.com/bid/24210 https://exchange.xforce.ibmcloud.com/vulnerabilities/34555 http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063629.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3171`	vulnerable	2026-06-08 04:49:53.389928	Details available Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an invalid value of the (1) smarty or (2) selected_theme parameter, which reveals the path in various error messages. Published: 2007-06-11T22:00:00.000Z Updated: 2024-08-07T14:05:29.237Z Open on db.gcve.eu Reference links http://osvdb.org/38337 http://www.securityfocus.com/bid/24210 http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063629.html https://exchange.xforce.ibmcloud.com/vulnerabilities/34554	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3170`	vulnerable	2026-06-08 04:49:53.388983	Details available Multiple cross-site scripting (XSS) vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to redirect.php or (2) the selected_theme parameter to demo/pop3/error.php. Published: 2007-06-11T22:00:00.000Z Updated: 2024-08-07T14:05:29.342Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/24210 https://exchange.xforce.ibmcloud.com/vulnerabilities/34553 http://osvdb.org/37464 http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063629.html http://osvdb.org/37463	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0469`	vulnerable	2026-06-08 04:48:54.040342	Details available Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG tag. Published: 2006-01-30T18:00:00.000Z Updated: 2024-08-07T16:34:14.979Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/16413 https://exchange.xforce.ibmcloud.com/vulnerabilities/24375 http://securityreason.com/securityalert/387 http://secunia.com/advisories/18655 http://www.vupen.com/english/advisories/2006/0388	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Uebimiau

Notes

PURL mappings

Vulnerability references

Contribute