GCVE - cpe:2.3:a:cynox:cyphor:0.19:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cynox:cyphor:0.19:*:*:*:*:*:*:*

part: a version: 0.19 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-3237`	not_vulnerable	2026-06-08 04:48:39.968738	Details available Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML via the t_login parameter of footer.php. Published: 2005-10-14T04:00:00.000Z Updated: 2024-08-07T23:01:59.273Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1015020 https://exchange.xforce.ibmcloud.com/vulnerabilities/22550 http://securityreason.com/securityalert/70 http://www.osvdb.org/19946 http://secunia.com/advisories/17104/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3236`	vulnerable	2026-06-08 04:48:39.968343	Details available Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or (2) the nick parameter of lostpwd.php. Published: 2005-10-14T04:00:00.000Z Updated: 2024-08-07T23:01:59.395Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1015020 http://www.osvdb.org/19944 https://exchange.xforce.ibmcloud.com/vulnerabilities/22552 http://securityreason.com/securityalert/70 http://www.osvdb.org/19945	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.