GCVE - cpe:2.3:a:siberiancms:siberiancms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siberiancms:siberiancms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Siberiancms (`5043c966-5fa6-592d-9407-e592710e5a2e`)
Product	Siberiancms (`79a26ab1-b725-5ecb-a076-f4ade3a11d16`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/xtraball/siberiancms`	purl2cpe	2026-06-01 10:14:23.630746

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-41702`	vulnerable	2026-06-08 06:43:54.891456	SiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CRITICAL (9.8) SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Published: 2024-07-30T09:18:04.027Z Updated: 2024-08-02T04:46:52.687Z Open on db.gcve.eu Reference links https://www.gov.il/en/Departments/faq/cve_advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39378`	vulnerable	2026-06-08 06:09:37.240557	SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user HIGH (8.8) SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user Published: 2023-09-26T09:23:48.455Z Updated: 2024-09-24T17:42:01.496Z Open on db.gcve.eu Reference links https://www.gov.il/en/Departments/faq/cve_advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39377`	vulnerable	2026-06-08 06:09:37.240190	SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method HIGH (7.2) SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method Published: 2023-09-26T09:22:26.246Z Updated: 2024-09-24T13:22:03.046Z Open on db.gcve.eu Reference links https://www.gov.il/en/Departments/faq/cve_advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39376`	vulnerable	2026-06-08 06:09:37.239782	SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network MEDIUM (6.5) SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network Published: 2023-09-26T09:19:55.559Z Updated: 2024-09-24T13:23:06.327Z Open on db.gcve.eu Reference links https://www.gov.il/en/Departments/faq/cve_advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39375`	vulnerable	2026-06-08 06:09:37.239299	SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges HIGH (7.5) SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges Published: 2023-09-26T09:15:01.807Z Updated: 2024-09-24T13:24:36.817Z Open on db.gcve.eu Reference links https://www.gov.il/en/Departments/faq/cve_advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6906`	vulnerable	2026-06-08 05:09:55.136396	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.