GCVE - cpe:2.3:a:easy_cms:easy

Approved changes feed: RSS · Atom

cpe:2.3:a:easy_cms:easy_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Easy Cms (`e17ee1dd-2cd6-5dc6-a0e7-2bebcf69ff94`)
Product	Easy Cms (`c0fe84ad-5562-514f-b0f2-dcd086b92b80`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-0508`	vulnerable	2026-06-08 04:48:54.193901	Details available Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory. Published: 2006-02-01T23:00:00.000Z Updated: 2024-08-07T16:41:27.531Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/423442/100/0/threaded http://www.securityfocus.com/archive/1/424431/100/0/threaded http://secunia.com/advisories/18673 https://exchange.xforce.ibmcloud.com/vulnerabilities/24373	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0507`	vulnerable	2026-06-08 04:48:54.193544	Details available Multiple cross-site scripting (XSS) vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via (1) unknown attack vectors in the administrative interface and (2) input fields of the contact form. Published: 2006-02-01T23:00:00.000Z Updated: 2024-08-07T16:41:27.624Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/423442/100/0/threaded http://www.vupen.com/english/advisories/2006/0385 http://www.securityfocus.com/archive/1/424431/100/0/threaded http://www.securityfocus.com/bid/16430 http://www.securityfocus.com/archive/1/423563/100/0/threaded	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.