GCVE - cpe:2.3:a:michael_dean:double_choco

Approved changes feed: RSS · Atom

cpe:2.3:a:michael_dean:double_choco_latte:0.9.4.3:*:*:*:*:*:*:*

part: a version: 0.9.4.3 update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:sourceforge/dcl`	purl2cpe	2026-06-01 10:17:42.130686

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-0888`	vulnerable	2026-06-08 04:48:13.901918	Details available Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name. Published: 2005-03-26T05:00:00.000Z Updated: 2024-08-07T21:28:29.071Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/19805 http://sourceforge.net/project/shownotes.php?release_id=315160 http://secunia.com/advisories/14688 http://securitytracker.com/id?1013559	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0887`	vulnerable	2026-06-08 04:48:13.901551	Details available Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement. Published: 2005-03-26T05:00:00.000Z Updated: 2024-08-07T21:28:28.958Z Open on db.gcve.eu Reference links http://secunia.com/advisories/14688 https://exchange.xforce.ibmcloud.com/vulnerabilities/19806 http://securitytracker.com/id?1013559 http://sourceforge.net/project/shownotes.php?release_id=315144	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.