GCVE - cpe:2.3:a:longino:jacome_php-revista:1.1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:longino:jacome_php-revista:1.1.2:*:*:*:*:*:*:*

part: a version: 1.1.2 update: *

Vendor	Longino (`949fa453-9a41-5528-9f0f-ba3b38246aea`)
Product	Jacome Php Revista (`a0404e94-dc51-58c4-82d5-e8bcec9ee761`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4608`	vulnerable	2026-06-08 04:49:18.373776	Details available Multiple cross-site scripting (XSS) vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cadena parameter in busqueda.php and the (2) email parameter in lista.php. Published: 2006-09-07T00:00:00.000Z Updated: 2024-08-07T19:14:47.755Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19818 http://www.osvdb.org/28450 https://www.exploit-db.com/exploits/8425 http://www.securityfocus.com/archive/1/502637/100/0/threaded http://securityreason.com/securityalert/1499	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4607`	vulnerable	2026-06-08 04:49:18.373438	Details available admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by setting the ID_ADMIN and SUPER_ADMIN parameters to 1. Published: 2006-09-07T00:00:00.000Z Updated: 2024-08-07T19:14:47.762Z Open on db.gcve.eu Reference links http://www.osvdb.org/28449 http://www.securityfocus.com/bid/19818 https://www.exploit-db.com/exploits/8425 http://www.securityfocus.com/archive/1/502637/100/0/threaded http://securityreason.com/securityalert/1499	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4606`	vulnerable	2026-06-08 04:49:18.373069	Details available Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) id_temas parameter in busqueda_tema.php, the (2) cadena parameter in busqueda.php, the (3) id_autor parameter in autor.php, the (4) email parameter in lista.php, and the (5) id_articulo parameter in articulo.php. Published: 2006-09-07T00:00:00.000Z Updated: 2024-08-07T19:14:47.803Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19818 https://www.exploit-db.com/exploits/8425 https://www.exploit-db.com/exploits/3538 http://www.osvdb.org/28452 http://www.osvdb.org/28446	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4605`	vulnerable	2026-06-08 04:49:18.372541	Details available PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to execute arbitrary PHP code via the adodb parameter. Published: 2006-09-07T00:00:00.000Z Updated: 2024-08-07T19:14:47.885Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19818 https://www.exploit-db.com/exploits/8425 http://www.securityfocus.com/archive/1/502637/100/0/threaded http://www.osvdb.org/28443 http://securityreason.com/securityalert/1499	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Jacome Php Revista

Notes

PURL mappings

Vulnerability references

Contribute