Approved changes feed: RSS · Atom

cpe:2.3:a:blue_dragon:php_blue_dragon:platinum_2.9.1:*:*:*:*:*:*:*

part: a version: platinum_2.9.1 update: *

VendorBlue Dragon (69900878-af57-5465-86eb-01122c543a25)
ProductPhp Blue Dragon (36fd8ea8-1ce5-5636-b427-de60e7a1a722)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4962 vulnerable 2026-06-08 04:49:19.384480 Details available
Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file.
Published: 2006-09-23T10:00:00.000Z
Updated: 2024-08-07T19:32:22.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4961 vulnerable 2026-06-08 04:49:19.384088 Details available
SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php.
Published: 2006-09-23T10:00:00.000Z
Updated: 2024-08-07T19:32:22.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4960 vulnerable 2026-06-08 04:49:19.383650 Details available
Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter, which is reflected in an error message resulting from a failed SQL query.
Published: 2006-09-23T10:00:00.000Z
Updated: 2024-08-07T19:32:22.803Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.