Phpclanwebsite
Approved changes feed: RSS · Atom
cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23.1:*:*:*:*:*:*:*part: a version: 1.23.1 update: *
| Vendor | Phpclanwebsite (97d8a39d-0ac8-551f-8f8e-fb72a99e5af7) |
|---|---|
| Product | Phpclanwebsite (b6bb0fea-32d0-5da2-99f3-815eb3880082) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-5879 |
vulnerable | 2026-06-08 04:50:53.448019 |
Details available
Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter and other unspecified vectors.
Published: 2009-01-08T19:00:00.000Z
Updated: 2024-08-07T11:13:13.047Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5878 |
vulnerable | 2026-06-08 04:50:53.447566 |
Details available
Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary files via a .. (dot dot) in the (1) boxname parameter to theme/superchrome/box.php and the (2) theme parameter to phpclanwebsite/footer.php.
Published: 2009-01-08T19:00:00.000Z
Updated: 2024-08-07T11:13:13.156Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5877 |
vulnerable | 2026-06-08 04:50:53.446555 |
Details available
Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) form_id parameter to pcw/processforms.php, (3) pcwlogin and (4) pcw_pass parameters to pcw/setlogin.php, (5) searchvalue parameter to pcw/downloads.php, and the (6) searchvalue and (7) whichfield parameter to pcw/downloads.php, a different vector than CVE-2006-0444.
Published: 2009-01-08T19:00:00.000Z
Updated: 2024-08-07T11:13:13.120Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0445 |
vulnerable | 2026-06-08 04:48:53.889263 |
Details available
index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "\", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability.
Published: 2006-01-26T22:00:00.000Z
Updated: 2024-08-07T16:34:14.785Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0444 |
vulnerable | 2026-06-08 04:48:53.888970 |
Details available
SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page. NOTE: the poll_id vector can also allow resultant cross-site scripting (XSS) from an unquoted error message for invalid SQL syntax.
Published: 2006-01-26T22:00:00.000Z
Updated: 2024-08-07T16:34:14.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0366 |
vulnerable | 2026-06-08 04:48:53.617255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.