Approved changes feed: RSS · Atom

cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*

part: a version: 0.9.3 update: *

VendorPhpwebsite (218e6af0-3e7e-5908-9a90-1ab0f756d669)
ProductPhpwebsite (6924450b-fa58-52e7-a10a-28d0560d0ebc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4265 vulnerable 2026-06-08 04:59:30.042691 Details available
Cross-site scripting (XSS) vulnerability in phpWebSite before 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-12-08T11:00:00.000Z
Updated: 2024-09-16T17:58:34.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0973 vulnerable 2026-06-08 04:48:55.880273 Details available
SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter.
Published: 2006-03-03T11:00:00.000Z
Updated: 2024-08-07T16:56:14.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4792 vulnerable 2026-06-08 04:48:45.107621 Details available
SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2006-04-29T10:00:00.000Z
Updated: 2024-09-16T23:15:24.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0572 vulnerable 2026-06-08 04:48:13.019857 Details available
index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_search_module parameter, which reveals the path in a PHP error message.
Published: 2005-02-27T05:00:00.000Z
Updated: 2024-08-07T21:21:05.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0565 vulnerable 2026-06-08 04:48:13.007901 Details available
The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension.
Published: 2005-02-27T05:00:00.000Z
Updated: 2024-08-07T21:21:06.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2322 vulnerable 2026-06-08 04:48:09.281734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1655 vulnerable 2026-06-08 04:47:54.722497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1654 vulnerable 2026-06-08 04:47:54.721918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1516 vulnerable 2026-06-08 04:47:54.444351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.