Approved changes feed: RSS · Atom

cpe:2.3:a:chxo:feedsplitter:2006-01-21:*:*:*:*:*:*:*

part: a version: 2006-01-21 update: *

VendorChxo (4732c90d-6333-50cd-8675-ee62de78c191)
ProductFeedsplitter (0fc30485-b69f-55d6-b64c-7b7ffcb3bf72)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4552 vulnerable 2026-06-08 04:49:18.278129 Details available
Cross-site scripting (XSS) vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to inject arbitrary web script or HTML via the RSS feed.
Published: 2006-09-06T00:00:00.000Z
Updated: 2024-08-07T19:14:47.560Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4551 vulnerable 2026-06-08 04:49:18.277864 Details available
Eval injection vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to execute arbitrary PHP code via (1) the file specified as the value of the format parameter, and possibly (2) the RSS feed.
Published: 2006-09-06T00:00:00.000Z
Updated: 2024-08-07T19:14:47.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4550 vulnerable 2026-06-08 04:49:18.277575 Details available
Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. (dot dot) sequences in the format parameter with a leading ".", which bypasses a security check.
Published: 2006-09-06T00:00:00.000Z
Updated: 2024-08-07T19:14:47.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4549 vulnerable 2026-06-08 04:49:18.277197 Details available
CHXO Feedsplitter 2006-01-21 allows remote attackers to read the source code of feedsplitter.php via the showsource function. NOTE: this issue is not a vulnerability in standard distributions, but could be an issue if the source has been modified.
Published: 2006-09-06T00:00:00.000Z
Updated: 2024-08-07T19:14:47.442Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.