Approved changes feed: RSS · Atom

cpe:2.3:a:osi_codes_inc.:phplive:3.2.2:*:*:*:*:*:*:*

part: a version: 3.2.2 update: *

VendorOsi Codes Inc. (169391d8-8e89-5ad7-aeaf-535814de01ee)
ProductPhplive (3b783663-6eb1-57b7-9498-03dee0c660e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-0821 vulnerable 2026-06-08 04:50:17.865241 Details available
SQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attackers to execute arbitrary SQL commands via the questid parameter in an expand_question action.
Published: 2008-02-19T20:00:00.000Z
Updated: 2024-08-07T08:01:39.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3060 vulnerable 2026-06-08 04:49:46.748750 Details available
Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to (a) chat.php, (2) LANG[DEFAULT_BRANDING] and (3) PHPLIVE_VERSION parameters to (b) help.php, the (4) admin[name] parameter to (c) admin/header.php, and the (5) BASE_URL parameter to (d) super/info.php, and in some cases, the LANG[DEFAULT_BRANDING], PHPLIVE_VERSION, and (6) nav_line parameters to setup/footer.php, different vectors than CVE-2006-6769.
Published: 2007-06-06T01:00:00.000Z
Updated: 2024-08-07T14:05:27.885Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.