Phpmysport
Approved changes feed: RSS · Atom
cpe:2.3:a:djayp:phpmysport:1.4:*:*:*:*:*:*:*part: a version: 1.4 update: *
| Vendor | Djayp (4aac58fc-a9de-5a98-9906-970978bf9df6) |
|---|---|
| Product | Phpmysport (5dff3ab8-895c-5853-b115-94b839e08654) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/devloic/phpmysportreloaded |
purl2cpe | 2026-06-01 10:18:03.549790 |
pkg:sourceforge/phpmysport |
purl2cpe | 2026-06-01 10:18:03.549793 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1110 |
vulnerable | 2026-06-08 04:54:05.235669 |
Details available
Directory traversal vulnerability in index.php in phpMySport 1.4 allows remote attackers to list arbitrary directories via a .. (dot dot) in the current_folder parameter.
Published: 2010-03-25T17:00:00.000Z
Updated: 2024-08-07T01:14:06.184Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1109 |
vulnerable | 2026-06-08 04:54:05.235253 |
Details available
Multiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) v2 parameter in a member view action, (2) v1 parameter in a news action, (3) v1 parameter in an information action, (4) v2 parameter in a team view action, (5) v2 parameter in a club view action, or (6) v2 parameter in a matches view action.
Published: 2010-03-25T17:00:00.000Z
Updated: 2024-08-07T01:14:05.797Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.