lkw199711 Smanga 3.2.7
Approved changes feed: RSS · Atom
cpe:2.3:a:lkw199711:smanga:3.2.7:*:*:*:*:*:*:*part: a version: 3.2.7 update: *
| Vendor | Lkw199711 (574257e3-c6ef-5166-b785-0a9fa1ae982c) |
|---|---|
| Product | Smanga (7017e606-d0fa-5fde-b977-e3da2fb051f7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/lkw199711/smanga |
purl2cpe | 2026-09-15 20:25:00.179576 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-70833 |
vulnerable | 2026-06-08 07:43:17.034945 |
Details available
An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully takeover the account by manipulating POST parameters. The issue stems from insecure permission validation in check-power.php.
Published: 2026-02-20T00:00:00.000Z
Updated: 2026-02-23T18:36:57.535Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-70831 |
vulnerable | 2026-06-08 07:43:17.034369 |
Details available
A Remote Code Execution (RCE) vulnerability was found in Smanga 3.2.7 in the /php/path/rescan.php interface. The application fails to properly sanitize user-supplied input in the mediaId parameter before using it in a system shell command. This allows an unauthenticated attacker to inject arbitrary operating system commands, leading to complete server compromise.
Published: 2026-02-20T00:00:00.000Z
Updated: 2026-02-23T19:56:57.701Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34193 |
vulnerable | 2026-06-08 06:37:33.035346 |
Details available
smanga 3.2.7 does not filter the file parameter at the PHP/get file flow.php interface, resulting in a path traversal vulnerability that can cause arbitrary file reading.
Published: 2024-05-20T17:32:46.532Z
Updated: 2025-02-13T15:53:02.995Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.