GCVE - cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Toenda Software Development (`50ff9dee-95de-561d-a62d-f685c9f44fcf`)
Product	Toendacms (`15470cc6-4a47-53f3-b762-2735c68fa4fa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4016`	vulnerable	2026-06-08 04:49:10.709293	Details available Cross-site scripting (XSS) vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter. Published: 2006-08-07T19:00:00.000Z Updated: 2024-08-07T18:57:44.294Z Open on db.gcve.eu Reference links http://www.majorsecurity.de/index_en2.php?major_rls=major_rls27 http://www.securityfocus.com/archive/1/442100 http://securitytracker.com/id?1016636 http://secunia.com/advisories/21344 http://securityreason.com/securityalert/1337	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2799`	vulnerable	2026-06-08 04:49:07.584273	Details available Cross-site scripting (XSS) vulnerability in content_footer.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the print_url variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources. Published: 2006-06-03T10:00:00.000Z Updated: 2024-08-07T18:06:25.978Z Open on db.gcve.eu Reference links http://secunia.com/advisories/20391 https://exchange.xforce.ibmcloud.com/vulnerabilities/27611 http://www.vupen.com/english/advisories/2006/2081 http://www.securityfocus.com/bid/18207	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4277`	vulnerable	2026-06-08 04:48:43.484570	Details available Cross-site scripting (XSS) vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter. Published: 2005-12-16T11:00:00.000Z Updated: 2024-08-07T23:38:51.486Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/435412/100/0/threaded http://www.securityfocus.com/bid/18178 http://www.toenda.com/files/toendaCMS_0.7_Beta.zip http://secunia.com/advisories/18058 http://securitytracker.com/id?1015354	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3551`	vulnerable	2026-06-08 04:48:41.135881	Details available toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file. Published: 2005-11-16T07:37:00.000Z Updated: 2024-08-07T23:17:22.711Z Open on db.gcve.eu Reference links http://secunia.com/advisories/17471 http://www.vupen.com/english/advisories/2005/2343 http://www.securityfocus.com/archive/1/415975/30/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3550`	vulnerable	2026-06-08 04:48:41.135528	Details available Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the id_user parameter. Published: 2005-11-16T07:37:00.000Z Updated: 2024-08-07T23:17:23.280Z Open on db.gcve.eu Reference links http://secunia.com/advisories/17471 http://www.vupen.com/english/advisories/2005/2343 http://www.securityfocus.com/bid/15348 http://www.securityfocus.com/archive/1/415975/30/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Toendacms

Notes

PURL mappings

Vulnerability references

Contribute