GCVE - cpe:2.3:a:ej3:topo:2.2.178:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ej3:topo:2.2.178:*:*:*:*:*:*:*

part: a version: 2.2.178 update: *

Vendor	Ej3 (`0c5e85fe-2614-5b59-be00-def2b6607de8`)
Product	Topo (`f837ef3b-4c5d-5377-9398-629f55643775`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-3834`	vulnerable	2026-06-08 04:49:10.283090	Details available EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors. Published: 2006-07-25T00:00:00.000Z Updated: 2024-08-07T18:48:39.237Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1279 http://www.securityfocus.com/archive/1/439890/100/100/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3833`	vulnerable	2026-06-08 04:49:10.282804	Details available index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries via a URL with a modified entry ID. Published: 2006-07-25T00:00:00.000Z Updated: 2024-08-07T18:48:39.079Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/27711 http://securityreason.com/securityalert/1279 http://www.securityfocus.com/archive/1/439890/100/100/threaded http://www.securityfocus.com/bid/18959	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3536`	vulnerable	2026-06-08 04:49:09.598178	Details available Direct static code injection vulnerability in code/class_db_text.php in EJ3 TOPo 2.2.178 and earlier allows remote attackers to execute arbitrary PHP code via parameters such as (1) descripcion and (2) pais, which are stored directly in a PHP script. NOTE: the provenance of this information is unknown; the details are obtained solely from third party reports. Published: 2006-07-12T21:00:00.000Z Updated: 2024-08-07T18:30:34.380Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/27659 http://www.vupen.com/english/advisories/2006/2736 http://www.securityfocus.com/bid/18935	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0984`	vulnerable	2026-06-08 04:48:55.896797	Details available Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter. Published: 2006-03-03T11:00:00.000Z Updated: 2024-08-07T16:56:14.416Z Open on db.gcve.eu Reference links http://secunia.com/advisories/19070 http://www.securityfocus.com/bid/16879 http://www.vupen.com/english/advisories/2006/0775 http://www.osvdb.org/23541 https://exchange.xforce.ibmcloud.com/vulnerabilities/24980	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1716`	vulnerable	2026-06-08 04:48:27.256943	Details available TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as client IP addresses. Published: 2005-05-24T04:00:00.000Z Updated: 2024-09-17T01:35:44.555Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15325 http://www.osvdb.org/16700 http://securitytracker.com/id?1014016 http://lostmon.blogspot.com/2005/05/topo-22-multiple-variable-fields-xss.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1715`	vulnerable	2026-06-08 04:48:27.256535	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Topo

Notes

PURL mappings

Vulnerability references

Contribute