Approved changes feed: RSS · Atom

cpe:2.3:a:greencms:greencms:2.3.0603:*:*:*:*:*:*:*

part: a version: 2.3.0603 update: *

VendorGreencms (3094e5b5-bec4-577a-8a53-332d6acd6b54)
ProductGreencms (195b0572-0a12-5153-8657-dfd098b68038)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/greencms/greencms purl2cpe 2026-06-01 10:18:20.613220
pkg:sourceforge/greencms purl2cpe 2026-06-01 10:18:20.613224

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19376 vulnerable 2026-06-08 05:11:15.696260 Details available
An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to delete a log file via the index.php?m=admin&c=data&a=clear URI.
Published: 2018-11-20T21:00:00.000Z
Updated: 2024-08-05T11:37:11.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19329 vulnerable 2026-06-08 05:11:15.632343 Details available
GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile delete button.
Published: 2018-11-17T15:00:00.000Z
Updated: 2024-08-05T11:30:04.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12988 vulnerable 2026-06-08 05:10:42.182568 Details available
GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an index.php?m=admin&c=media&a=downfile URI.
Published: 2018-06-29T05:00:00.000Z
Updated: 2024-08-05T08:52:49.448Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.