GCVE - cpe:2.3:a:noah:noah:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:noah:noah:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/huawei-noah/noah-research`	purl2cpe	2026-06-01 10:14:42.545236

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6187`	vulnerable	2026-06-08 04:50:08.118586	Details available Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the filepath parameter to (1) css_file.php, (2) js_file.php, or (3) xml_file.php in noah/modules/nosystem/templates/. Published: 2007-11-30T01:00:00.000Z Updated: 2024-08-07T15:54:27.071Z Open on db.gcve.eu Reference links http://osvdb.org/39682 http://osvdb.org/39683 http://www.securityfocus.com/bid/26633 http://osvdb.org/39684 https://exchange.xforce.ibmcloud.com/vulnerabilities/38727	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2572`	vulnerable	2026-06-08 04:49:45.288689	Details available PHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka PHP Content Architect, phparch) 0.9 pre 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpls[1] parameter. Published: 2007-05-09T21:00:00.000Z Updated: 2024-08-07T13:42:33.696Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/34103 http://osvdb.org/37656 https://www.exploit-db.com/exploits/3861 http://www.vupen.com/english/advisories/2007/1676	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.