Approved changes feed: RSS · Atom

cpe:2.3:a:boonex:dolphin:6.1.2:*:*:*:*:*:*:*

part: a version: 6.1.2 update: *

VendorBoonex (1384ec30-cb63-5dad-966e-6f198c66b3d8)
ProductDolphin (8083f889-a9a8-5e3e-b27e-276786ead9da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/boonex/dolphin.pro purl2cpe 2026-06-01 10:17:57.601645
pkg:sourceforge/boonex-dolphin purl2cpe 2026-06-01 10:17:57.601647

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0873 vulnerable 2026-06-08 05:00:46.146419 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to explanation.php or the (2) photos_only, (3) online_only, or (4) mode parameters to viewFriends.php.
Published: 2012-02-23T19:00:00.000Z
Updated: 2024-09-16T16:54:09.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3167 vulnerable 2026-06-08 04:50:33.294105 Details available
Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dir[plugins] parameter to (a) HTMLSax3.php and (b) safehtml.php in plugins/safehtml/ and the (2) sIncPath parameter to (c) ray/modules/global/inc/content.inc.php. NOTE: vector 1 might be a problem in SafeHTML instead of Dolphin.
Published: 2008-07-14T23:00:00.000Z
Updated: 2024-08-07T09:28:41.415Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.