GCVE - cpe:2.3:a:scriptphp:annoncescripthp:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:scriptphp:annoncescripthp:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Scriptphp (`32207cdb-ef37-5dc7-a69e-db158e4e0707`)
Product	Annoncescripthp (`16cfb82b-c7be-5e8c-81c6-1c9fa997444e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6480`	vulnerable	2026-06-08 04:49:28.939703	Details available admin/admin_membre/fiche_membre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain sensitive information via the idmembre parameter, which discloses the passwords for arbitrary users. Published: 2006-12-12T00:00:00.000Z Updated: 2024-08-07T20:26:46.526Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/453966/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/30805 http://www.securityfocus.com/bid/21514 http://secunia.com/advisories/23318 http://securityreason.com/securityalert/2019	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6479`	vulnerable	2026-06-08 04:49:28.939383	Details available Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the email parameter in (1) erreurinscription.php, (2) Templates/admin.dwt.php, (3) Templates/commun.dwt.php, (4) membre.dwt.php, and (5) admin/admin_config/Aide.php. Published: 2006-12-12T00:00:00.000Z Updated: 2024-08-07T20:26:46.508Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/453966/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/30804 http://www.securityfocus.com/bid/21514 http://secunia.com/advisories/23318 http://www.vupen.com/english/advisories/2006/4940	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6478`	vulnerable	2026-06-08 04:49:28.938953	Details available Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) email.php, the (2) no parameter in (b) voirannonce.php, the (3) idmembre parameter in (c) admin/admin_membre/fiche_membre.php, and the (4) idannonce parameter in (d) admin/admin_annonce/okvalannonce.php and (e) admin/admin_annonce/changeannonce.php. Published: 2006-12-12T00:00:00.000Z Updated: 2024-08-07T20:26:46.515Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/453966/100/0/threaded http://www.securityfocus.com/bid/21514 https://exchange.xforce.ibmcloud.com/vulnerabilities/30803 http://secunia.com/advisories/23318 http://www.vupen.com/english/advisories/2006/4940	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.