GCVE - cpe:2.3:a:quirm:saxon:5.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:quirm:saxon:5.4:*:*:*:*:*:*:*

part: a version: 5.4 update: *

Vendor	Quirm (`a7a5ce71-a300-5617-b90b-6e3b496227fe`)
Product	Saxon (`18e93240-1c1b-526e-8101-30f5ca6ed4bf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-4863`	vulnerable	2026-06-08 04:49:57.345191	Details available SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter. Published: 2007-10-30T21:00:00.000Z Updated: 2024-08-07T15:08:34.138Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/26238 http://www.quirm.net/punbb/viewtopic.php?id=129 http://www.securityfocus.com/archive/1/482921/100/0/threaded http://www.netvigilance.com/advisory0055 http://osvdb.org/38839	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4862`	vulnerable	2026-06-08 04:49:57.344857	Details available Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the config[news_url] parameter. Published: 2007-10-30T21:00:00.000Z Updated: 2024-08-07T15:08:33.795Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/38134 http://www.securityfocus.com/bid/26237 http://www.quirm.net/punbb/viewtopic.php?id=129 http://securityreason.com/securityalert/3310 http://www.securityfocus.com/archive/1/482920/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4861`	vulnerable	2026-06-08 04:49:57.344427	Details available SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive information via (1) a direct request for news.php, (2) an invalid use of a newsid array parameter to admin/edit-item.php, and possibly unspecified vectors related to additional scripts in (3) admin/, (4) rss/, and (5) the root directory of the installation, which reveal the path in various error messages. Published: 2007-10-30T21:00:00.000Z Updated: 2024-08-07T15:08:33.826Z Open on db.gcve.eu Reference links http://osvdb.org/45330 http://www.quirm.net/punbb/viewtopic.php?id=129 https://exchange.xforce.ibmcloud.com/vulnerabilities/38138 http://www.securityfocus.com/archive/1/482930/100/0/threaded http://securityreason.com/securityalert/3311	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.