GCVE - cpe:2.3:a:project_alumni:project_alumni:1.0.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:project_alumni:project_alumni:1.0.8:*:*:*:*:*:*:*

part: a version: 1.0.8 update: *

Vendor	Project Alumni (`3f24d8b8-eac8-532b-b29d-e3a2594a87ac`)
Product	Project Alumni (`b2743cef-b1a7-5cd5-a0f4-84d8af312a77`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6126`	vulnerable	2026-06-08 04:50:07.908200	Details available Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the year parameter to (1) xml/index.php; or (2) the year parameter to view.page.inc.php, which is reachable through a view action to the top-level index.php. Published: 2007-11-26T22:00:00.000Z Updated: 2024-08-07T15:54:26.865Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/38621 https://www.exploit-db.com/exploits/4655 http://www.securityfocus.com/bid/26565 http://www.vupen.com/english/advisories/2007/3999 http://secunia.com/advisories/27820	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.