GCVE - cpe:2.3:a:picoflat_cms:picoflat

Approved changes feed: RSS · Atom

cpe:2.3:a:picoflat_cms:picoflat_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Picoflat Cms (`de8bf0bf-a3f0-5a9e-bd41-2dbec694c5c8`)
Product	Picoflat Cms (`943debe7-cee0-52d7-9c81-a3d63b9973b6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-5920`	vulnerable	2026-06-08 04:50:07.251046	Details available index.php in Domenico Mancini PicoFlat CMS before 0.4.18 allows remote attackers to include certain files via unspecified vectors, possibly due to a directory traversal vulnerability. NOTE: this can be leveraged to bypass authentication and upload files by including pico_insert.php or unspecified other administrative scripts. NOTE: some of these details are obtained from third party information. Published: 2007-11-10T02:00:00.000Z Updated: 2024-08-07T15:47:00.512Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/38310 http://www.securityfocus.com/bid/26362 http://picoflat.altervista.org/ http://osvdb.org/42106 http://secunia.com/advisories/27504	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5390`	vulnerable	2026-06-08 04:50:05.891197	Details available PHP remote file inclusion vulnerability in index.php in PicoFlat CMS 0.4.14 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pagina parameter. Published: 2007-10-12T10:00:00.000Z Updated: 2024-08-07T15:31:58.804Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/26043 http://secunia.com/advisories/27208 http://osvdb.org/37686 https://www.exploit-db.com/exploits/4520	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.