Approved changes feed: RSS · Atom

cpe:2.3:a:lmeve_project:lmeve:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLmeve Project (2ca0badb-a27d-54d2-87a0-f2a15d8857f1)
ProductLmeve (cf0534e1-a459-5586-8513-8eed72c9ce0b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/roxlukas/lmeve purl2cpe 2026-06-01 10:16:20.212833

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4246 vulnerable 2026-06-08 05:38:09.026123 roxlukas LMeve Login Page sql injection
MEDIUM (6.3)
A vulnerability was found in roxlukas LMeve and classified as critical. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument X-Forwarded-For leads to sql injection. The attack may be launched remotely. The name of the patch is 29e1ead3bb1c1fad53b77dfc14534496421c5b5d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216176.
Published: 2022-12-17T00:00:00.000Z
Updated: 2025-04-15T13:01:49.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25071 vulnerable 2026-06-08 05:11:29.310328 roxlukas LMeve proxy.php insert_log sql injection
MEDIUM (5.5)
A vulnerability was found in roxlukas LMeve up to 0.1.58. It has been rated as critical. Affected by this issue is the function insert_log of the file wwwroot/ccpwgl/proxy.php. The manipulation of the argument fetch leads to sql injection. Upgrading to version 0.1.59-beta is able to address this issue. The patch is identified as c25ff7fe83a2cda1fcb365b182365adc3ffae332. It is recommended to upgrade the affected component. VDB-217610 is the identifier assigned to this vulnerability.
Published: 2023-01-07T11:28:15.497Z
Updated: 2024-08-05T12:33:47.765Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.