GCVE - cpe:2.3:a:deltascripts:pro_publish:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:deltascripts:pro_publish:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Deltascripts (`d6470cba-31a1-5133-9401-829f12d60788`)
Product	Pro Publish (`f69361c9-fc47-592f-9cc6-c5b63a5bfeeb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2821`	vulnerable	2026-06-08 04:49:07.615965	Details available Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the (1) artid parameter in art.php and the (2) catname parameter in cat.php. Published: 2006-06-05T17:00:00.000Z Updated: 2024-08-07T18:06:26.447Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1027 http://www.securityfocus.com/bid/18243 http://www.securityfocus.com/archive/1/435787/100/0/threaded http://soot.shabgard.org/bugs/propublish.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2129`	vulnerable	2026-06-08 04:48:58.968574	Details available Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings, which are stored in set_inc.php. Published: 2006-05-01T23:00:00.000Z Updated: 2024-08-07T17:35:31.393Z Open on db.gcve.eu Reference links http://secunia.com/advisories/19882 http://www.vupen.com/english/advisories/2006/1578 http://www.securityfocus.com/bid/17762 http://www.osvdb.org/25128 https://exchange.xforce.ibmcloud.com/vulnerabilities/26149	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2128`	vulnerable	2026-06-08 04:48:58.968150	Details available Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameter to (a) admin/login.php, (3) find_str parameter to (b) search.php, or (4) artid parameter to (c) art.php, or (5) catid parameter to (d) cat.php. Published: 2006-05-01T23:00:00.000Z Updated: 2024-08-07T17:35:31.414Z Open on db.gcve.eu Reference links http://www.osvdb.org/25127 http://secunia.com/advisories/19882 http://www.vupen.com/english/advisories/2006/1578 http://www.securityfocus.com/bid/17762 http://www.osvdb.org/25126	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.