Approved changes feed: RSS · Atom

cpe:2.3:a:arcms_project:arcms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArcms Project (16ef396f-f25c-5e88-b1fd-8968a6232a4e)
ProductArcms (8bc9e2ea-d168-58c8-b362-4ffc29fc3dfe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/xianwei/akcms2 purl2cpe 2026-06-01 10:14:40.200460

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19558 vulnerable 2026-06-08 05:11:15.881287 Details available
An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php.
Published: 2018-11-26T07:00:00.000Z
Updated: 2024-08-05T11:37:11.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19557 vulnerable 2026-06-08 05:11:15.880773 Details available
An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images.
Published: 2018-11-26T07:00:00.000Z
Updated: 2024-08-05T11:37:11.503Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.