Approved changes feed: RSS · Atom
cpe:2.3:a:plain_black:webgui:6.6.5:*:*:*:*:*:*:*part: a version: 6.6.5 update: *
| Vendor | Plain Black (5bebd8a6-aab5-58a9-90ac-2f5ea23e3960) |
|---|---|
| Product | Webgui (4d7ae47c-714c-53ae-8f2d-e5bac1c583a9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-0407 |
vulnerable | 2026-06-08 04:49:32.037343 |
Details available
Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote attackers to inject arbitrary web script or HTML via the username parameter during anonymous registration, a different vector than CVE-2007-0308. NOTE: it is possible that a separate "WikiPage titles" issue was also fixed.
Published: 2007-01-23T00:00:00.000Z
Updated: 2024-08-07T12:19:30.204Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0308 |
vulnerable | 2026-06-08 04:49:31.883511 |
Details available
Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.3.4 (beta) allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles.
Published: 2007-01-18T00:00:00.000Z
Updated: 2024-08-07T12:12:17.985Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0165 |
vulnerable | 2026-06-08 04:48:46.096674 |
Details available
Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2) name field of the default email form.
Published: 2006-01-11T21:00:00.000Z
Updated: 2024-08-07T16:25:34.038Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4694 |
not_vulnerable | 2026-06-08 04:48:44.767047 |
Details available
Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors.
Published: 2006-02-01T20:00:00.000Z
Updated: 2024-08-07T23:53:28.547Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.