Approved changes feed: RSS · Atom

cpe:2.3:a:php_live:php_live:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhp Live (446d11e9-0df9-59e7-8e3b-140aabe860df)
ProductPhp Live (a4befaa7-e986-57f6-9836-0c0331114d73)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3218 vulnerable 2026-06-08 04:49:53.460763 Details available
Cross-site scripting (XSS) vulnerability in request.php in PHP Live! 3.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the pagex parameter.
Published: 2007-06-14T22:00:00.000Z
Updated: 2024-08-07T14:05:29.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6769 vulnerable 2026-06-08 04:49:29.711513 Details available
Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search_string parameter in (a) setup/transcripts.php, the (2) l parameter in (b) index.php, the (3) login field in (c) phplive/index.php, and the (4) deptid and (5) x parameters in (d) phplive/message_box.php.
Published: 2006-12-27T23:00:00.000Z
Updated: 2024-08-07T20:42:06.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3911 vulnerable 2026-06-08 04:49:10.494374 Details available
PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the css_path parameter in (1) help.php and (2) setup/header.php.
Published: 2006-07-28T00:00:00.000Z
Updated: 2024-08-07T18:48:39.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1373 vulnerable 2026-06-08 04:48:57.050905 Details available
Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the base_url parameter.
Published: 2006-03-24T02:00:00.000Z
Updated: 2024-08-07T17:12:20.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2485 vulnerable 2026-06-08 04:48:09.885373 Details available
Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attackers to include arbitrary files and directories via unspecified attack vectors.
Published: 2005-10-25T04:00:00.000Z
Updated: 2024-08-08T01:29:13.670Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.