Approved changes feed: RSS · Atom

cpe:2.3:a:rapidleech:rapidleech:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRapidleech (1d08a68b-7b45-59e6-8a6e-f1cbc1bc930e)
ProductRapidleech (089f543a-ecc3-57d4-85da-5156db66b4b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/th3-822/rapidleech purl2cpe 2026-06-01 10:16:18.046336
pkg:sourceforge/rapidleech-pro purl2cpe 2026-06-01 10:16:18.046338

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4312 vulnerable 2026-06-08 05:38:09.164763 Th3-822 Rapidleech zip.php zip_go cross site scripting
LOW (3.5)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in Th3-822 Rapidleech. This affects the function zip_go of the file classes/options/zip.php. The manipulation of the argument archive leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named 885a87ea4ee5e14fa95801eca255604fb2e138c6. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218295. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2023-01-13T17:06:37.617Z
Updated: 2024-08-03T17:23:10.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1090 vulnerable 2026-06-08 04:51:12.972500 Details available
Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter.
Published: 2009-03-25T18:00:00.000Z
Updated: 2024-08-07T04:57:17.932Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1089 vulnerable 2026-06-08 04:51:12.971965 Details available
Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter.
Published: 2009-03-25T18:00:00.000Z
Updated: 2024-08-07T04:57:17.918Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.