GCVE - cpe:2.3:a:chupix:chupix_cms:0.2.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:chupix:chupix_cms:0.2.3:*:*:*:*:*:*:*

part: a version: 0.2.3 update: *

Vendor	Chupix (`1dccc066-3f33-598a-8069-5e7cbff8f846`)
Product	Chupix Cms (`42290691-d0f3-54b9-a6a9-a4d41c62ae87`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:sourceforge/chupix`	purl2cpe	2026-06-01 10:18:20.616504

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-3562`	vulnerable	2026-06-08 04:50:35.317381	Details available Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mods parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2008-08-10T20:00:00.000Z Updated: 2024-08-07T09:45:18.663Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/30564 http://secunia.com/advisories/31362 https://exchange.xforce.ibmcloud.com/vulnerabilities/44258 http://www.securityfocus.com/bid/30564/exploit	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5139`	vulnerable	2026-06-08 04:49:58.001084	Details available PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. Published: 2007-09-28T21:00:00.000Z Updated: 2024-08-07T15:24:40.933Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/4462 http://www.securityfocus.com/bid/25835 https://exchange.xforce.ibmcloud.com/vulnerabilities/36829	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4957`	vulnerable	2026-06-08 04:49:57.537323	Details available Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a .. (dot dot) in the (3) repertoire parameter. Published: 2007-09-18T20:00:00.000Z Updated: 2024-08-07T15:17:27.490Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/36641 http://osvdb.org/38882 http://osvdb.org/38881 http://secunia.com/advisories/26851 http://www.securityfocus.com/bid/25681	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.