Approved changes feed: RSS · Atom

cpe:2.3:a:ej3:topo:2.2:*:*:*:*:*:*:*

part: a version: 2.2 update: *

VendorEj3 (0c5e85fe-2614-5b59-be00-def2b6607de8)
ProductTopo (f837ef3b-4c5d-5377-9398-629f55643775)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3536 vulnerable 2026-06-08 04:49:09.597622 Details available
Direct static code injection vulnerability in code/class_db_text.php in EJ3 TOPo 2.2.178 and earlier allows remote attackers to execute arbitrary PHP code via parameters such as (1) descripcion and (2) pais, which are stored directly in a PHP script. NOTE: the provenance of this information is unknown; the details are obtained solely from third party reports.
Published: 2006-07-12T21:00:00.000Z
Updated: 2024-08-07T18:30:34.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1716 vulnerable 2026-06-08 04:48:27.256920 Details available
TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as client IP addresses.
Published: 2005-05-24T04:00:00.000Z
Updated: 2024-09-17T01:35:44.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1715 vulnerable 2026-06-08 04:48:27.255680 Details available
Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrary web script or HTML via the (1) m, (2) s, (3) ID, or (4) t parameters, or the (5) field name, (6) Your Web field, or (7) email field in the comments section.
Published: 2005-05-24T04:00:00.000Z
Updated: 2024-09-16T18:34:44.145Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.