GCVE - cpe:2.3:a:netjuke:netjuke:1.0

Approved changes feed: RSS · Atom

cpe:2.3:a:netjuke:netjuke:1.0_rc2:*:*:*:*:*:*:*

part: a version: 1.0_rc2 update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:sourceforge/netjuke`	purl2cpe	2026-06-01 10:14:52.982050

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-4811`	vulnerable	2026-06-08 04:49:57.264136	Details available Multiple cross-site scripting (XSS) vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to inject arbitrary web script or HTML via (1) the val parameter to alphabet.php in an alpha.albums action, or the PATH_INFO to (2) random.php or (3) admin/hidden.php. Published: 2007-09-11T18:00:00.000Z Updated: 2024-08-07T15:08:33.803Z Open on db.gcve.eu Reference links http://osvdb.org/38402 https://exchange.xforce.ibmcloud.com/vulnerabilities/36517 http://osvdb.org/38403 http://www.securityfocus.com/archive/1/478871/100/0/threaded http://osvdb.org/38404	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4810`	vulnerable	2026-06-08 04:49:57.263711	Details available Multiple SQL injection vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to execute arbitrary SQL commands via (1) the ge_id parameter in a list.artists action to explore.php or (2) the id parameter in a show.tracks action to xml.php. Published: 2007-09-11T18:00:00.000Z Updated: 2024-08-07T15:08:33.766Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/25600 http://osvdb.org/38834 http://www.securityfocus.com/archive/1/478871/100/0/threaded http://securityreason.com/securityalert/3110 https://exchange.xforce.ibmcloud.com/vulnerabilities/36516	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.