GCVE - cpe:2.3:a:smeweb:smeweb:1.4f:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:smeweb:smeweb:1.4f:*:*:*:*:*:*:*

part: a version: 1.4f update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-2652`	vulnerable	2026-06-08 04:50:31.494871	Details available Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2) category parameters. Published: 2008-06-10T18:00:00.000Z Updated: 2024-08-07T09:05:30.280Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5725 http://secunia.com/advisories/30477 http://www.securityfocus.com/archive/1/493130/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/42811 http://www.securityfocus.com/bid/29496	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2644`	vulnerable	2026-06-08 04:50:31.486991	Details available Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the (1) data parameter to catalog.php, the (2) keyword parameter to search.php, the (3) page parameter to bb.php, and the (4) new_s parameter to order.php. Published: 2008-06-10T18:00:00.000Z Updated: 2024-08-07T09:05:30.351Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5725 https://exchange.xforce.ibmcloud.com/vulnerabilities/42813 http://secunia.com/advisories/30477 http://www.securityfocus.com/archive/1/493130/100/0/threaded http://www.securityfocus.com/bid/29496	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.