Approved changes feed: RSS · Atom

cpe:2.3:a:izicontents:izicontents:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIzicontents (0ae859ed-28d2-545a-9fed-18179bf6e8bf)
ProductIzicontents (c8c130e0-c68c-5038-90cb-3a96592cd09d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5055 vulnerable 2026-06-08 04:49:57.757014 Details available
Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php.
Published: 2007-09-24T22:00:00.000Z
Updated: 2024-08-07T15:17:28.024Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5054 vulnerable 2026-06-08 04:49:57.756715 Details available
Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the gsLanguage parameter to (1) search/search.php, (2) poll/inlinepoll.php, (3) poll/showpoll.php, (4) links/showlinks.php, or (5) links/submit_links.php in modules/.
Published: 2007-09-24T22:00:00.000Z
Updated: 2024-08-07T15:17:28.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5053 vulnerable 2026-06-08 04:49:57.756206 Details available
Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php; or a URL in the language_home parameter to (3) search/search.php, (4) poll/inlinepoll.php, (5) poll/showpoll.php, (6) links/showlinks.php, or (7) links/submit_links.php in modules/; related to missing checks in (a) modules/moduleSec.php and (b) include/includeSec.php for inclusion of certain URLs, as demonstrated by an ftps:// URL.
Published: 2007-09-24T22:00:00.000Z
Updated: 2024-08-07T15:17:28.182Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.