GCVE - cpe:2.3:a:neocrome:seditio:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:neocrome:seditio:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Neocrome (`979294e6-b9c2-54f8-826d-813d70d0ea12`)
Product	Seditio (`1568988f-7ec0-5a3d-81a3-861965c66c89`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/sedteam/seditio`	purl2cpe	2026-06-01 10:16:44.872908

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6202`	vulnerable	2026-06-08 04:50:08.197241	Details available SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pag_sub[] parameter to plug.php. Published: 2007-12-01T02:00:00.000Z Updated: 2024-08-07T15:54:27.112Z Open on db.gcve.eu Reference links http://www.neocrome.net/page.php?id=2349 https://www.exploit-db.com/exploits/4678 http://osvdb.org/38924 http://www.securityfocus.com/bid/26655 http://secunia.com/advisories/27881	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4057`	vulnerable	2026-06-08 04:49:55.615208	Details available Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users to upload arbitrary PHP code via a filename ending with (1) .php.gif, (2) .php.jpg, or (3) .php.png. Published: 2007-07-30T17:00:00.000Z Updated: 2024-08-07T14:37:06.219Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/4235 https://exchange.xforce.ibmcloud.com/vulnerabilities/35681 http://osvdb.org/39023 http://www.securityfocus.com/bid/25130	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6344`	vulnerable	2026-06-08 04:49:28.664806	Details available Multiple unspecified vulnerabilities in Neocrome Seditio 1.10 and earlier have unknown impact and attack vectors related to (1) plugins/ipsearch/ipsearch.admin.php, and (2) pfs/pfs.edit.inc.php, (3) users/users.register.inc.php in system/core. NOTE: the users.profile.inc.php vector is identified by CVE-2006-6177. NOTE: these issues might be related to SQL injection. Published: 2006-12-07T01:00:00.000Z Updated: 2024-08-07T20:26:45.104Z Open on db.gcve.eu Reference links http://www.neocrome.net/page.php?id=2233 http://secunia.com/advisories/23180 http://www.vupen.com/english/advisories/2006/4805	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6343`	vulnerable	2026-06-08 04:49:28.664425	Details available SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Published: 2006-12-07T01:00:00.000Z Updated: 2024-08-07T20:26:45.141Z Open on db.gcve.eu Reference links http://secunia.com/advisories/23180 http://www.securityfocus.com/bid/21366 http://www.securityfocus.com/archive/1/453125/100/0/threaded http://www.vupen.com/english/advisories/2006/4805 http://securityreason.com/securityalert/1974	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6177`	vulnerable	2026-06-08 04:49:22.237657	Details available SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10 and earlier allows remote authenticated users to execute arbitrary SQL commands via a double-url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif" followed by an encoded NULL and ' (apostrophe) (%2500%2527). Published: 2006-11-30T16:00:00.000Z Updated: 2024-08-07T20:19:34.865Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/30466 http://www.neocrome.net/page.php?id=2233 http://www.vupen.com/english/advisories/2006/4668 http://secunia.com/advisories/23054 http://securityreason.com/securityalert/1931	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.