Approved changes feed: RSS · Atom
cpe:2.3:a:phkp_project:phkp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Phkp Project (e30eba47-49b6-5e58-967d-6cc0d90e26cd) |
|---|---|
| Product | Phkp (119d3288-df2f-5563-997a-4b62d3ec9094) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/remko/phkp |
purl2cpe | 2026-06-01 10:18:03.312096 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1000885 |
vulnerable | 2026-06-08 05:10:26.186294 |
Details available
PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b contains a Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in function pgp_exec() phkp.php:98 that can result in It is possible to manipulate gpg-keys or execute commands remotely. This attack appear to be exploitable via HKP-Api: /pks/lookup?search.
Published: 2018-12-20T20:00:00.000Z
Updated: 2024-09-16T17:18:19.765Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.