Approved changes feed: RSS · Atom

cpe:2.3:a:webmedia_explorer:webmedia_explorer:3.2.2:*:*:*:*:*:*:*

part: a version: 3.2.2 update: *

VendorWebmedia Explorer (f9b81664-8c73-5103-b0a3-1327643e914a)
ProductWebmedia Explorer (2b094894-eabe-53e2-9f1b-57231666c489)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4948 vulnerable 2026-06-08 04:49:57.524894 Details available
Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer (webmex) 3.2.2 allow remote attackers to execute arbitrary PHP code via (1) a URL in the path_include parameter to includes/rss.class.php, (2) a URL in the path_template parameter to (a) templates/main.tpl.php or (b) templates/folder_messages_link_message_name.tpl.php, or (4) a URL in the path_templates parameter to templates/sidebar.tpl.php. NOTE: the vulnerability is present only when the administrator does not follow installation instructions about the requirement for .htaccess support. NOTE: the includes/core.lib.php vector is already covered by CVE-2006-5252.
Published: 2007-09-18T20:00:00.000Z
Updated: 2024-08-07T15:17:27.818Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.