Approved changes feed: RSS · Atom

cpe:2.3:a:cplinks:cplinks:1.03:*:*:*:*:*:*:*

part: a version: 1.03 update: *

VendorCplinks (ab9addfe-2dcc-56fe-a741-d4f338546cbb)
ProductCplinks (9fbe70c5-388d-585a-b929-a87b55501000)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-2181 vulnerable 2026-06-08 04:50:23.175165 Details available
Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the (1) search_text and (2) search_category parameters. NOTE: the XSS reportedly occurs in a forced SQL error message. NOTE: some of these details are obtained from third party information.
Published: 2008-05-13T22:00:00.000Z
Updated: 2024-08-07T08:49:58.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2180 vulnerable 2026-06-08 04:50:23.174771 Details available
Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) admin_username parameter (aka the username field) to admin/index.php and the (2) search_text and (3) search_category parameters to search.php. NOTE: some of these details are obtained from third party information.
Published: 2008-05-13T22:00:00.000Z
Updated: 2024-08-07T08:49:58.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.