Approved changes feed: RSS · Atom

cpe:2.3:a:pear:structures_datagrid_datasource_mdb2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPear (202938b0-7fb8-5241-8587-372df9c20f96)
ProductStructures Datagrid Datasource Mdb2 (83a1c115-50b6-5e6e-818b-28faaabbb352)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5934 vulnerable 2026-06-08 04:50:07.267970 Details available
The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2 application, as demonstrated by a file:// URL or a URL for an intranet web site.
Published: 2007-11-13T22:00:00.000Z
Updated: 2024-08-07T15:47:00.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3628 vulnerable 2026-06-08 04:49:54.385111 Details available
Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."
Published: 2007-07-09T16:00:00.000Z
Updated: 2024-08-07T14:21:36.456Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.