GCVE - cpe:2.3:a:kwsphp:kwsphp:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kwsphp:kwsphp:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Kwsphp (`b91e9305-f793-58a5-a366-79e7e91a4934`)
Product	Kwsphp (`5bdd4cdb-8149-58fd-8d99-9f3b3872c092`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-1757`	vulnerable	2026-06-08 04:50:21.730700	Details available Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter. Published: 2008-04-12T20:00:00.000Z Updated: 2024-08-07T08:32:01.317Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3809 http://www.securityfocus.com/bid/28612 https://exchange.xforce.ibmcloud.com/vulnerabilities/41814 http://www.securityfocus.com/archive/1/490470/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5485`	vulnerable	2026-06-08 04:50:06.199337	Details available SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter. Published: 2007-10-16T23:00:00.000Z Updated: 2024-08-07T15:31:59.017Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/3496 http://www.securityfocus.com/bid/26083 https://www.exploit-db.com/exploits/4528 https://exchange.xforce.ibmcloud.com/vulnerabilities/37196	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4979`	vulnerable	2026-06-08 04:49:57.573989	Details available SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a results action, a different module than CVE-2007-4956.2. Published: 2007-09-19T18:00:00.000Z Updated: 2024-08-07T15:17:27.577Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/4422 https://exchange.xforce.ibmcloud.com/vulnerabilities/36661 http://www.securityfocus.com/bid/25700	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4956`	vulnerable	2026-06-08 04:49:57.535628	Details available Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2) the id parameter to index.php in a carnet editer action in the Member_Space (espace_membre) module, or (3) the typenav parameter to index.php in a browser aff action in the stats module. Published: 2007-09-18T20:00:00.000Z Updated: 2024-08-07T15:17:27.505Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/36635 https://www.exploit-db.com/exploits/4412 http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=29 https://www.exploit-db.com/exploits/4413 https://exchange.xforce.ibmcloud.com/vulnerabilities/36634	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.