Approved changes feed: RSS · Atom

cpe:2.3:a:arc2_project:arc2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArc2 Project (dda1454b-7bc7-5aa3-b0d5-bd49ecd5d856)
ProductArc2 (e4e164c0-25e4-52d7-85d4-a0572f638f51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/semsol/arc2 purl2cpe 2026-06-01 10:17:57.095931
pkg:github/semsol/arc2 purl2cpe 2026-06-01 10:17:57.095933

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5873 vulnerable 2026-06-08 05:02:58.502169 Details available
MEDIUM (5.3)
ARC (aka ARC2) through 2011-12-01 allows reflected XSS via the end_point.php query parameter in an output=htmltab action.
Published: 2023-04-25T00:00:00.000Z
Updated: 2025-02-03T21:01:43.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5872 vulnerable 2026-06-08 05:02:58.501757 Details available
CRITICAL (9.8)
ARC (aka ARC2) through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2_StoreSelectQueryHandler.php via comments in a SPARQL WHERE clause.
Published: 2023-04-25T00:00:00.000Z
Updated: 2025-02-03T21:05:45.720Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.