Approved changes feed: RSS · Atom

cpe:2.3:a:project_alumni:project_alumni:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProject Alumni (3f24d8b8-eac8-532b-b29d-e3a2594a87ac)
ProductProject Alumni (b2743cef-b1a7-5cd5-a0f4-84d8af312a77)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6127 vulnerable 2026-06-08 04:50:07.908629 Details available
Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the year parameter to (1) view.page.inc.php, which is reachable through a view action to index.php; or (2) the year parameter to news.page.inc.php, which is reachable through a news action to index.php.
Published: 2007-11-26T22:00:00.000Z
Updated: 2024-08-07T15:54:26.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6126 vulnerable 2026-06-08 04:50:07.907442 Details available
Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the year parameter to (1) xml/index.php; or (2) the year parameter to view.page.inc.php, which is reachable through a view action to the top-level index.php.
Published: 2007-11-26T22:00:00.000Z
Updated: 2024-08-07T15:54:26.865Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.