Approved changes feed: RSS · Atom

cpe:2.3:a:puzzle_apps_cms:puzzle_apps_cms:2.2.1:*:*:*:*:*:*:*

part: a version: 2.2.1 update: *

VendorPuzzle Apps Cms (630e9c21-52c0-5b8b-90cb-cb73e630d65d)
ProductPuzzle Apps Cms (065adb59-9d84-52db-9b54-5ae8c35bfa68)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5147 vulnerable 2026-06-08 04:49:58.009832 Details available
Multiple PHP remote file inclusion vulnerabilities in Puzzle Apps CMS 2.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the MODULEDIR parameter to (1) core/modules/my/my.module.php or (2) core/modules/xml/xml.module.php; the COREROOT parameter to (3) config.loader.php, (4) platform.loader.php, (5) core.loader.php, (6) person.loader.php, or (7) module.loader.php in core/ or (8) install/steps/step_3.php; or the THISDIR parameter to (9) people.lib.php, (10) general.lib.php, (11) content.lib.php, or (12) templates.lib.php in core/modules/admin/libs/ or (13) core/modules/webstat/MEC/index.php.
Published: 2007-10-01T00:00:00.000Z
Updated: 2024-09-16T20:06:59.557Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.