GCVE - cpe:2.3:a:gonafish:linkscaffe:3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gonafish:linkscaffe:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

Vendor	Gonafish (`f2443048-75e3-55b9-879d-8815f5324e3c`)
Product	Linkscaffe (`6178f469-3508-52f4-bea2-534e7011ff59`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-3932`	vulnerable	2026-06-08 04:49:10.544842	Details available SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Published: 2006-07-31T21:00:00.000Z Updated: 2024-08-07T18:48:39.446Z Open on db.gcve.eu Reference links http://secunia.com/advisories/21212 http://www.vupen.com/english/advisories/2006/2983 https://exchange.xforce.ibmcloud.com/vulnerabilities/27961	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3884`	vulnerable	2026-06-08 04:49:10.396897	Details available Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) offset and (2) limit parameters, (3) newdays parameter in a new action, and the (4) link_id parameter in a deadlink action. NOTE: this issue can also be used for path disclosure by a forced SQL error, or to modify PHP files using OUTFILE. Published: 2006-07-27T00:00:00.000Z Updated: 2024-08-07T18:48:39.278Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/27962 http://www.securityfocus.com/bid/19149 http://www.osvdb.org/27518 http://secunia.com/advisories/21212 http://www.vupen.com/english/advisories/2006/2983	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3883`	vulnerable	2026-06-08 04:49:10.396394	Details available Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the tablewidth parameter in (a) counter.php; (2) the newdays parameter in (b) links.php; and the (3) tableborder, (4) menucolor, (5) textcolor, and (6) bodycolor parameters in (c) menu.inc.php. Published: 2006-07-27T00:00:00.000Z Updated: 2024-08-07T18:48:39.272Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19149 http://secunia.com/advisories/21212 http://www.osvdb.org/27520 http://www.vupen.com/english/advisories/2006/2983 https://exchange.xforce.ibmcloud.com/vulnerabilities/27960	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.