Approved changes feed: RSS · Atom

cpe:2.3:a:sips:sips:0.3.0pl2:*:*:*:*:*:*:*

part: a version: 0.3.0pl2 update: *

VendorSips (dfaae5b0-ed2b-50c9-b723-ade15612e091)
ProductSips (9b1860a0-4fb2-5dd5-9d1a-723184fff66b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4733 vulnerable 2026-06-08 04:49:18.665235 Details available
PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[sipssys] parameter. NOTE: the product's documentation recommends placing the affected file outside of the web root, so the scope of issue is limited to admins who do not, or cannot, follow this recommendation.
Published: 2006-09-13T22:00:00.000Z
Updated: 2024-08-07T19:23:41.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0267 vulnerable 2026-06-08 04:46:21.092249 Details available
preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the "theme" field followed by the Status::admin command, which causes the Status line to be entered into the password file.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T02:42:28.555Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.