Approved changes feed: RSS · Atom

cpe:2.3:a:4site:4site_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor4Site (7f56ad04-0f72-57db-b085-24658c92089f)
Product4Site Cms (2c546b8a-94a8-5766-9a98-95df8c67d0a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/cms-4site purl2cpe 2026-06-01 10:16:19.350368

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4152 vulnerable 2026-06-03 14:30:35.296409 Details available
SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.
Published: 2010-11-03T19:00:00.000Z
Updated: 2024-08-07T03:34:37.685Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0646 vulnerable 2026-06-03 14:29:25.406329 Details available
Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) password parameters to pcgi/4site.pl, (3) page parameter to print/print.shtml, (4) s and (5) i parameters to portfolio/index.shtml, (6) h parameter to hotel/index.php, (7) id parameter to news/news1.shtml, and the (8) th parameter to faq/index.shtml.
Published: 2009-02-18T23:00:00.000Z
Updated: 2024-08-07T04:40:05.113Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.