Approved changes feed: RSS · Atom

cpe:2.3:a:boonex:dolphin:5.1:*:*:*:*:*:*:*

part: a version: 5.1 update: *

VendorBoonex (1384ec30-cb63-5dad-966e-6f198c66b3d8)
ProductDolphin (8083f889-a9a8-5e3e-b27e-276786ead9da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/boonex/dolphin.pro purl2cpe 2026-06-01 10:17:57.596747
pkg:sourceforge/boonex-dolphin purl2cpe 2026-06-01 10:17:57.596750

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0873 vulnerable 2026-06-08 05:00:46.145141 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to explanation.php or the (2) photos_only, (3) online_only, or (4) mode parameters to viewFriends.php.
Published: 2012-02-23T19:00:00.000Z
Updated: 2024-09-16T16:54:09.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4189 vulnerable 2026-06-08 04:49:11.196272 Details available
Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (5) click.php, (6) faq.php, (7) gallery.php, (8) im.php, (9) inbox.php, (10) join_form.php, (11) logout.php, (12) messages_inbox.php, and many other scripts.
Published: 2006-08-17T01:00:00.000Z
Updated: 2024-08-07T18:57:46.262Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.