Approved changes feed: RSS · Atom
cpe:2.3:a:salims_softhouse:jaf_cms:3.0:rc:*:*:*:*:*:*part: a version: 3.0 update: rc
| Vendor | Salims Softhouse (908b7977-37b9-59cb-bd19-202d1718cb59) |
|---|---|
| Product | Jaf Cms (62cdd4d2-b6f7-555e-9485-6b2f73c1daa2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-2053 |
vulnerable | 2026-06-08 04:48:28.207841 |
Details available
Just another flat file (JAF) CMS before 3.0 Final allows remote attackers to obtain sensitive information via (1) an * (asterisk) in the id parameter, (2) a blank id parameter, or (3) an * (asterisk) in the disp parameter to index.php, which reveals the path in an error message. NOTE: a followup suggests that this may be a directory traversal or file inclusion vulnerability.
Published: 2005-06-26T04:00:00.000Z
Updated: 2024-08-07T22:15:36.914Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1505 |
vulnerable | 2026-06-08 04:47:54.397535 |
Details available
Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. (dot dot) in the show parameter.
Published: 2005-02-19T05:00:00.000Z
Updated: 2024-08-08T00:53:23.955Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1504 |
vulnerable | 2026-06-08 04:47:54.397148 |
Details available
The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php.
Published: 2005-02-19T05:00:00.000Z
Updated: 2024-08-08T00:53:24.187Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.