GCVE - cpe:2.3:a:limbo_cms:limbo_cms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:limbo_cms:limbo_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Limbo Cms (`ffd31af9-dd5a-5ad0-80fa-c62fc1a1ffcb`)
Product	Limbo Cms (`aef314d8-ddaf-5b83-9a74-d96e1a1afeca`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-6078`	not_vulnerable	2026-06-08 04:50:53.984843	Details available SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php. Published: 2009-02-06T11:00:00.000Z Updated: 2024-08-07T11:20:24.310Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/45990 http://www.securityfocus.com/bid/31837 http://www.vupen.com/english/advisories/2008/2887 https://www.exploit-db.com/exploits/6796	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0734`	vulnerable	2026-06-08 04:50:17.662480	Details available SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php. Published: 2008-02-13T00:00:00.000Z Updated: 2024-08-07T07:54:23.301Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5088 http://www.securityfocus.com/bid/27710 https://exchange.xforce.ibmcloud.com/vulnerabilities/40415	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4320`	vulnerable	2026-06-08 04:48:43.593469	Details available Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to (1) doc.inc.php, (2) element.inc.php, and (3) node.inc.php, which leaks the path in an error message. Published: 2005-12-17T11:00:00.000Z Updated: 2024-08-07T23:38:51.804Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18063/ http://www.osvdb.org/21757 http://securitytracker.com/id?1015364 http://www.osvdb.org/21758 http://rgod.altervista.org/limbo1042_xpl.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4319`	vulnerable	2026-06-08 04:48:43.593136	Details available Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via ".." sequences in the option parameter. Published: 2005-12-17T11:00:00.000Z Updated: 2024-08-07T23:38:51.742Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18063/ http://securitytracker.com/id?1015364 http://rgod.altervista.org/limbo1042_xpl.html http://securityreason.com/securityalert/255 http://www.osvdb.org/21755	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4318`	not_vulnerable	2026-06-08 04:48:43.592760	Details available SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote attackers to execute arbitrary SQL commands via the _SERVER[REMOTE_ADDR] parameter, which modifies the underlying $_SERVER variable. Published: 2005-12-17T11:00:00.000Z Updated: 2024-08-07T23:38:51.993Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18063/ http://www.osvdb.org/21753 http://securitytracker.com/id?1015364 http://rgod.altervista.org/limbo1042_xpl.html http://securityreason.com/securityalert/255	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4317`	vulnerable	2026-06-08 04:48:43.592179	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.