Approved changes feed: RSS · Atom

cpe:2.3:a:positive_software:h-sphere:2.5:*:*:*:*:*:*:*

part: a version: 2.5 update: *

VendorPositive Software (6a992faa-c1b1-51eb-a35a-1b84ac7e3516)
ProductH Sphere (97a762db-4e16-564f-9a9e-211229b2a8d1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3278 vulnerable 2026-06-08 04:49:08.838048 Details available
Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) next_template, (2) start, (3) curr_menu_id, and (4) arid parameters in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html template_name.
Published: 2006-06-28T22:00:00.000Z
Updated: 2024-08-07T18:23:21.163Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.