Approved changes feed: RSS · Atom

cpe:2.3:a:oliver_georgi:phpwcms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOliver Georgi (054f3b00-9ff4-5745-a2f4-4d85de869631)
ProductPhpwcms (e57451ac-cba3-58fe-9d23-369d882eb22e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-7020 vulnerable 2026-06-08 04:49:30.168097 Details available
CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to modify HTTP headers and send spam e-mail via a spoofed HTTP Referer (HTTP_REFERER).
Published: 2007-02-15T02:00:00.000Z
Updated: 2024-08-07T20:50:05.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-7018 vulnerable 2026-06-08 04:49:30.166471 Details available
phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via a crafted argument to the nome_evento parameter to phpwcms_code_snippets/mail_file_form.php and (2) sample_ext_php/mail_file_form.php, which is processed by the render_PHPcode function.
Published: 2007-02-15T02:00:00.000Z
Updated: 2024-08-07T20:50:05.935Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.