Dragonfly Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:cpg-nuke:dragonfly_cms:9.0.6_.1:*:*:*:*:*:*:*
part: a version: 9.0.6_.1 update: *
| Vendor | Cpg Nuke (f99c24a3-0bb7-57eb-8bc2-22c65f17c3c0) |
|---|---|
| Product | Dragonfly Cms (e41b94a5-80ea-5ddb-856b-ae4e790f07f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-0644 |
vulnerable | 2026-06-08 04:48:54.743080 |
Details available
Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS (aka CPG Dragonfly CMS) 9.0.6.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in (1) the newlang parameter and (2) the installlang parameter in a cookie, as demonstrated by using error.php to insert malicious code into a log file, or uploading a malicious .png file, which is then included using install.php.
Published: 2006-02-10T11:00:00.000Z
Updated: 2024-08-07T16:41:28.838Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.