GCVE - cpe:2.3:a:cosmoshop:cosmoshop:8.10.78:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cosmoshop:cosmoshop:8.10.78:*:*:*:*:*:*:*

part: a version: 8.10.78 update: *

Vendor	Cosmoshop (`a51d4576-d7e2-58f6-aae2-405e3db35f2c`)
Product	Cosmoshop (`42320d81-8a1a-5e57-a141-b797e29b8a44`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2475`	vulnerable	2026-06-08 04:49:06.833867	Details available Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter. Published: 2006-05-19T17:00:00.000Z Updated: 2024-08-07T17:51:04.585Z Open on db.gcve.eu Reference links http://secunia.com/advisories/20177 https://exchange.xforce.ibmcloud.com/vulnerabilities/26533 http://www.osvdb.org/25648 http://securityreason.com/securityalert/919 http://www.securityfocus.com/archive/1/434368/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2474`	vulnerable	2026-06-08 04:49:06.833456	Details available SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary SQL commands via the artnum parameter. Published: 2006-05-19T17:00:00.000Z Updated: 2024-08-07T17:51:04.620Z Open on db.gcve.eu Reference links http://secunia.com/advisories/20177 http://www.osvdb.org/25649 http://securityreason.com/securityalert/919 https://exchange.xforce.ibmcloud.com/vulnerabilities/26534 http://www.securityfocus.com/bid/18024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2786`	vulnerable	2026-06-08 04:48:30.538914	Details available Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter. Published: 2005-09-02T04:00:00.000Z Updated: 2024-08-07T22:45:02.261Z Open on db.gcve.eu Reference links http://secunia.com/advisories/16625/ http://marc.info/?l=bugtraq&m=112534390600093&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2785`	vulnerable	2026-06-08 04:48:30.538657	Details available cosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local users to obtain sensitive information. Published: 2005-09-02T04:00:00.000Z Updated: 2024-08-07T22:45:02.259Z Open on db.gcve.eu Reference links http://secunia.com/advisories/16625/ http://marc.info/?l=bugtraq&m=112534390600093&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/22081	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2784`	vulnerable	2026-06-08 04:48:30.538328	Details available SQL injection vulnerability in the login function for the administration login panel in cosmoshop 8.10.78 allows remote attackers to execute arbitrary SQL commands and bypass authentication via unspecified vectors. Published: 2005-09-02T04:00:00.000Z Updated: 2024-08-07T22:45:02.339Z Open on db.gcve.eu Reference links http://secunia.com/advisories/16625/ http://marc.info/?l=bugtraq&m=112534390600093&w=2 http://www.securityfocus.com/bid/14689 https://exchange.xforce.ibmcloud.com/vulnerabilities/22079	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Cosmoshop

Notes

PURL mappings

Vulnerability references

Contribute