Approved changes feed: RSS · Atom
cpe:2.3:a:phpwcms:phpwcms:1.2.5_dev:*:*:*:*:*:*:*part: a version: 1.2.5_dev update: *
| Vendor | Phpwcms (0556bc97-66d9-577f-8228-8f84217d637a) |
|---|---|
| Product | Phpwcms (dba03076-cabc-5681-981e-344a5199e4e4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/slackero/phpwcms |
purl2cpe | 2026-06-01 10:17:39.695166 |
pkg:sourceforge/phpwcms |
purl2cpe | 2026-06-01 10:17:39.695168 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-6886 |
vulnerable | 2026-06-08 04:49:29.900478 |
Details available
phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request for (1) files.public-userroot.inc.php or (2) files.private.additions.inc.php in include/inc_lib/, which reveals the path in various error messages.
Published: 2007-01-05T11:00:00.000Z
Updated: 2024-08-07T20:42:07.553Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2519 |
vulnerable | 2026-06-08 04:49:06.985443 |
Details available
Directory traversal vulnerability in include/inc_ext/spaw/spaw_control.class.php in phpwcms 1.2.5-DEV allows remote attackers to include arbitrary local files via .. (dot dot) sequences in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in SPAW Editor PHP Edition.
Published: 2006-05-22T22:00:00.000Z
Updated: 2024-08-07T17:51:04.689Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2518 |
vulnerable | 2026-06-08 04:49:06.985045 |
Details available
Cross-site scripting (XSS) vulnerability in phpwcms 1.2.5-DEV allows remote attackers to inject arbitrary web script or HTML via the BL[be_cnt_plainhtml] parameter to include/inc_tmpl/content/cnt6.inc.php.
Published: 2006-05-22T22:00:00.000Z
Updated: 2024-08-07T17:51:04.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3790 |
not_vulnerable | 2026-06-08 04:48:42.178230 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in act_newsletter.php in phpwcms 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) i and (2) text parameters.
Published: 2005-11-24T11:00:00.000Z
Updated: 2024-08-07T23:24:36.239Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3789 |
vulnerable | 2026-06-08 04:48:42.177820 |
Details available
Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) form_lang parameter in login.php and (2) the imgdir parameter in random_image.php.
Published: 2005-11-24T11:00:00.000Z
Updated: 2024-08-07T23:24:36.199Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.