Approved changes feed: RSS · Atom

cpe:2.3:a:envolution:envolution:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEnvolution (52560439-4495-5ae0-9384-b0c0434145e7)
ProductEnvolution (bd483892-29b8-56e2-b917-d812918efe66)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4253 vulnerable 2026-06-08 04:49:55.985659 Details available
SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2005-4263.
Published: 2007-08-08T23:00:00.000Z
Updated: 2024-08-07T14:46:39.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4263 vulnerable 2026-06-08 04:48:43.470316 Details available
SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the (1) startrow and (2) catid parameter.
Published: 2005-12-15T11:00:00.000Z
Updated: 2024-08-07T23:38:51.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4262 vulnerable 2026-06-08 04:48:43.469938 Details available
Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the (1) startrow and (2) catid parameter. NOTE: this issue might be resultant from the SQL injection problem (CVE-2005-4263).
Published: 2005-12-15T11:00:00.000Z
Updated: 2024-08-07T23:38:51.389Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.