GCVE - cpe:2.3:a:phpecho_cms:phpecho

Approved changes feed: RSS · Atom

cpe:2.3:a:phpecho_cms:phpecho_cms:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Phpecho Cms (`6aafc92e-78e2-59cf-8eeb-f09d690764ed`)
Product	Phpecho Cms (`f4ae0ba3-3776-5106-bd1c-0b14fd611d0d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:sourceforge/phpechocms`	purl2cpe	2026-06-01 10:17:57.895978

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-1988`	vulnerable	2026-06-08 04:49:43.933223	Details available Cross-site scripting (XSS) vulnerability in kernel/filters.inc.php in PHPEcho CMS 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Published: 2007-04-12T01:00:00.000Z Updated: 2024-08-07T13:13:42.044Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/464707/100/0/threaded http://osvdb.org/35262 http://securityreason.com/securityalert/2550	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1987`	vulnerable	2026-06-08 04:49:43.932842	Details available Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _plugin_file parameter to smarty/internals/core.load_pulgins.php or the (2) root_path parameter to index.php. NOTE: CVE disputes (1) because the inclusion occurs within a function that is not called during a direct request. CVE disputes (2) because root_path is defined in config.php before use Published: 2007-04-12T01:00:00.000Z Updated: 2024-08-07T13:13:42.045Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/464709/100/0/threaded http://osvdb.org/34117 http://securityreason.com/securityalert/2551	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.