Approved changes feed: RSS · Atom

cpe:2.3:a:ibd:micro_cms:0.3.5:*:*:*:*:*:*:*

part: a version: 0.3.5 update: *

VendorIbd (04fce6ad-be01-5f95-a109-c012a7f4cbef)
ProductMicro Cms (72d5de6d-4d60-57f8-8a16-741935b35da2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3144 vulnerable 2026-06-08 04:49:08.437007 Details available
PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) and earlier allows remote attackers to execute arbitrary PHP code via a URL in the microcms_path parameter. NOTE: it was later reported that this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.
Published: 2006-06-22T22:00:00.000Z
Updated: 2024-08-07T18:16:06.150Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.