Approved changes feed: RSS · Atom

cpe:2.3:a:derek_leung:pslash:0.70:*:*:*:*:*:*:*

part: a version: 0.70 update: *

VendorDerek Leung (e1b2d412-a823-58f2-88c0-0447be36d113)
ProductPslash (4969becf-00ca-5c77-aa51-87771f60be42)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5014 vulnerable 2026-06-08 04:49:57.700133 Details available
Multiple PHP remote file inclusion vulnerabilities in pSlash 0.70 allow remote attackers to execute arbitrary PHP code via a URL in (1) the lvc_admin_dir parameter to modules/visitors2/admin/view-archiver.inc.php or (2) the lvc_include_dir parameter to modules/visitors2/include/menus.inc.php. NOTE: the modules/visitors2/include/config.inc.php vector is already covered by CVE-2006-4373. NOTE: vector 1 is disputed by CVE because PHP encounters a fatal instantiation error on a direct request for the file, before reaching the include statement.
Published: 2007-09-20T21:00:00.000Z
Updated: 2024-08-07T15:17:27.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4373 vulnerable 2026-06-08 04:49:17.728419 Details available
PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter.
Published: 2006-08-26T01:00:00.000Z
Updated: 2024-08-07T19:06:07.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1235 vulnerable 2026-06-08 04:46:19.412801 Details available
pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
Published: 2002-06-25T04:00:00.000Z
Updated: 2024-08-08T04:51:08.421Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.