GCVE - cpe:2.3:a:phpmysite:phpmysite:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpmysite:phpmysite:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Phpmysite (`2c7b00ed-2574-5c1d-8215-06cd835b50b1`)
Product	Phpmysite (`d958c51d-25db-5dba-82e4-c0a9b1ba20ac`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/barbo/phpmysite`	purl2cpe	2026-06-01 10:13:30.180742
`pkg:sourceforge/phpmysite`	purl2cpe	2026-06-01 10:13:30.180745

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1091`	vulnerable	2026-06-08 04:54:05.142220	Details available Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) city, (3) email, (4) state, and (5) message parameters. Published: 2010-03-24T17:00:00.000Z Updated: 2024-08-07T01:14:05.496Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/0492 https://exchange.xforce.ibmcloud.com/vulnerabilities/56574 http://www.exploit-db.com/exploits/11588 http://packetstormsecurity.org/1002-exploits/phpmysite-sqlxss.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1090`	vulnerable	2026-06-08 04:54:05.141784	Details available SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the action parameter. Published: 2010-03-24T17:00:00.000Z Updated: 2024-08-07T01:14:05.552Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/0492 https://exchange.xforce.ibmcloud.com/vulnerabilities/56573 http://www.exploit-db.com/exploits/11588 http://packetstormsecurity.org/1002-exploits/phpmysite-sqlxss.txt	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.