Approved changes feed: RSS · Atom

cpe:2.3:a:express-web:express-web_content_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorExpress Web (bbc8b910-c053-5fb0-96ec-68d8cdb5d048)
ProductExpress Web Content Management System (5f2df62e-1072-5f12-ac3e-2658ca1aed86)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-2210 vulnerable 2026-06-08 04:48:08.898593 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS) allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the (1) n, (2) b, (3) e, or (4) a parameters to default.asp, (5) the Referer header in an HTTP request to login.asp, or (6) the email parameter to subscribe/default.asp.
Published: 2005-07-10T04:00:00.000Z
Updated: 2024-09-16T18:29:07.578Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.