Approved changes feed: RSS · Atom

cpe:2.3:a:phpcms:phpcms:1.2.1_p12:*:*:*:*:*:*:*

part: a version: 1.2.1_p12 update: *

VendorPhpcms (83d879f0-66bc-5925-a229-6ac80f255a2c)
ProductPhpcms (835c51cb-4879-5caa-a3f7-e07f832ceb40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jylhx/phpcms purl2cpe 2026-06-01 10:14:41.482232
pkg:sourceforge/phpcmsv9 purl2cpe 2026-06-01 10:14:41.482234

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3019 vulnerable 2026-06-08 04:49:08.101414 Details available
Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPCMS_INCLUDEPATH parameter to files in parser/include/ including (1) class.parser_phpcms.php, (2) class.session_phpcms.php, (3) class.edit_phpcms.php, (4) class.http_indexer_phpcms.php, (5) class.cache_phpcms.php, (6) class.search_phpcms.php, (7) class.lib_indexer_universal_phpcms.php, and (8) class.layout_phpcms.php, (9) parser/plugs/counter.php, and (10) parser/parser.php. NOTE: the class.cache_phpcms.php vector was also reported to affect 1.1.7.
Published: 2006-06-15T10:00:00.000Z
Updated: 2024-08-07T18:16:04.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1840 vulnerable 2026-06-08 04:48:27.645464 Details available
Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php.
Published: 2005-06-02T04:00:00.000Z
Updated: 2024-08-07T22:06:57.413Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.