Phpcollegeexchange
Approved changes feed: RSS · Atom
cpe:2.3:a:david_degner:phpcollegeexchange:0.1.5c:*:*:*:*:*:*:*part: a version: 0.1.5c update: *
| Vendor | David Degner (d0707a8f-244c-5757-b557-b22c824018c4) |
|---|---|
| Product | Phpcollegeexchange (b762ca48-7feb-50c8-9ac7-6245f6aa2dce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/phpcollegeex |
purl2cpe | 2026-06-01 10:16:02.964351 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2219 |
vulnerable | 2026-06-08 04:51:27.317462 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the (1) _SESSION[handle] parameter to (a) home.php, (b) books/allbooks.php, or (c) books/home.php; or the (2) home parameter to (d) i_head.php or (e) i_nav.php, or (f) allbooks.php, (g) home.php, or (h) i_nav.php in books/.
Published: 2009-06-25T21:00:00.000Z
Updated: 2024-08-07T05:44:55.270Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2218 |
vulnerable | 2026-06-08 04:51:27.317110 |
Details available
Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to (1) i_head.php, (2) i_nav.php, (3) user_new_2.php, or (4) house/myrents.php; or (5) allbooks.php, (6) home.php, or (7) mybooks.php in books/. NOTE: house/myrents.php was also separately reported as a local file inclusion issue.
Published: 2009-06-25T21:00:00.000Z
Updated: 2024-08-07T05:44:55.625Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2096 |
vulnerable | 2026-06-08 04:51:26.730761 |
Details available
SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter.
Published: 2009-06-17T17:00:00.000Z
Updated: 2024-08-07T05:36:20.986Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.