GCVE - cpe:2.3:a:interact:interact:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:interact:interact:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Interact (`8e7804d8-e436-5665-8c3f-6849baa40139`)
Product	Interact (`eb6b3cc5-0ba9-5b4b-b4b4-81925b58fe24`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-4177`	vulnerable	2026-06-08 04:49:55.868840	Details available Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2007-3328. Published: 2007-08-08T01:11:00.000Z Updated: 2024-08-07T14:46:39.356Z Open on db.gcve.eu Reference links http://osvdb.org/36440 https://exchange.xforce.ibmcloud.com/vulnerabilities/35765 http://cce-interact.cvs.sourceforge.net/cce-interact/Interact/includes/common.inc.php?r1=1.259&r2=1.260 http://sourceforge.net/project/shownotes.php?release_id=528858&group_id=69681 http://www.securityfocus.com/bid/25173	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1644`	vulnerable	2026-06-08 04:48:57.693503	Details available login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2006-04-06T10:00:00.000Z Updated: 2024-08-07T17:19:49.288Z Open on db.gcve.eu Reference links http://secunia.com/advisories/19488 http://www.vupen.com/english/advisories/2006/1244 http://www.osvdb.org/24388 https://exchange.xforce.ibmcloud.com/vulnerabilities/25651	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1643`	vulnerable	2026-06-08 04:48:57.693098	Details available SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party. Published: 2006-04-06T10:00:00.000Z Updated: 2024-08-07T17:19:48.753Z Open on db.gcve.eu Reference links http://secunia.com/advisories/19488 http://www.securityfocus.com/bid/17385 https://exchange.xforce.ibmcloud.com/vulnerabilities/25653 http://www.vupen.com/english/advisories/2006/1244 http://www.osvdb.org/24390	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1642`	vulnerable	2026-06-08 04:48:57.690227	Details available Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search_terms parameter to (a) search.php, and (2) the first_name, (3) last_name, (4) email, (5) password, and (6) confirm_password parameters to (b) userinput.php. NOTE: the provenance of this information is unknown; the details are obtained from third party. In addition, the lack of precision in the third party descriptions makes it unclear whether the named vectors are correct. Published: 2006-04-06T10:00:00.000Z Updated: 2024-08-07T17:19:48.580Z Open on db.gcve.eu Reference links http://secunia.com/advisories/19488 http://www.osvdb.org/24461 https://exchange.xforce.ibmcloud.com/vulnerabilities/25652 http://www.osvdb.org/24389 http://www.vupen.com/english/advisories/2006/1244	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Interact

Notes

PURL mappings

Vulnerability references

Contribute