GCVE - cpe:2.3:a:dev:dev_web_management_system:1.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dev:dev_web_management_system:1.5:*:*:*:*:*:*:*

part: a version: 1.5 update: *

Vendor	Dev (`f44b68b2-53d9-5f86-a9c3-156b4e53d614`)
Product	Dev Web Management System (`efb03187-3c20-5fd0-960a-3b4af28dbb06`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-5447`	vulnerable	2026-06-08 04:49:20.527661	Details available Cross-site scripting (XSS) vulnerability in index.php in DEV Web Management System (WMS) 1.5 allows remote attackers to inject arbitrary web script or HTML via the action parameter. Published: 2006-10-23T17:00:00.000Z Updated: 2024-08-07T19:48:30.270Z Open on db.gcve.eu Reference links http://www.x0n3-h4ck.org/index.php?name=news&article=139 http://www.securityfocus.com/bid/20590 http://securityreason.com/securityalert/1758 http://www.securityfocus.com/archive/1/449121/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/29659	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0886`	vulnerable	2026-06-08 04:48:55.622377	Details available Cross-site scripting (XSS) vulnerability in register.php in DEV web management system 1.5 allows remote attackers to inject arbitrary web script or HTML via the "City/Region" field (mesto variable). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2006-02-25T11:00:00.000Z Updated: 2024-08-07T16:48:57.006Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/24875 http://www.osvdb.org/23468 http://www.vupen.com/english/advisories/2006/0723 http://www.securityfocus.com/bid/16812 http://secunia.com/advisories/18714	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4555`	vulnerable	2026-06-08 04:48:44.220764	Details available Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ENTER_ARTICLE_TITLE, (2) SPECIFY_ZONE, (3) ENTER_ARTICLE_HEADER, and (4) ENTER_ARTICLE_BODY indices in the language array parameter. Published: 2005-12-28T11:00:00.000Z Updated: 2024-08-07T23:46:05.622Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/23900 http://rgod.altervista.org/dev_15_sql_xpl.html http://www.securityfocus.com/bid/16063 http://secunia.com/advisories/18239 http://securitytracker.com/id?1015410	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4554`	vulnerable	2026-06-08 04:48:44.220362	Details available Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in an openforum action (openforum.php) in index.php, (2) cat parameter in getfile.php, and (3) target parameter in download_now.php. Published: 2005-12-28T11:00:00.000Z Updated: 2024-08-07T23:46:05.613Z Open on db.gcve.eu Reference links http://www.osvdb.org/22041 http://www.osvdb.org/22042 http://rgod.altervista.org/dev_15_sql_xpl.html http://www.securityfocus.com/bid/16063 https://exchange.xforce.ibmcloud.com/vulnerabilities/23898	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.