GCVE - cpe:2.3:a:elinestudio:site_composer:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:elinestudio:site_composer:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Elinestudio (`348b146e-92c8-5bc9-b852-7d9eb84e7504`)
Product	Site Composer (`57d0a713-eabd-5619-9515-30bb97743b20`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-2864`	vulnerable	2026-06-08 04:50:32.447758	Details available eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) trigger.asp or (2) common2.asp in cms/include/, which reveals the database path. Published: 2008-06-25T10:00:00.000Z Updated: 2024-08-07T09:14:14.893Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3957 https://www.exploit-db.com/exploits/5859 http://www.bugreport.ir/?/45 https://exchange.xforce.ibmcloud.com/vulnerabilities/43192 http://www.securityfocus.com/archive/1/493473/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2863`	vulnerable	2026-06-08 04:50:32.447344	Details available Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to (1) folderdel_.asp or (2) foldernew.asp in cms/assetmanager/. Published: 2008-06-25T10:00:00.000Z Updated: 2024-08-07T09:14:14.743Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3957 https://www.exploit-db.com/exploits/5859 https://exchange.xforce.ibmcloud.com/vulnerabilities/43193 http://www.bugreport.ir/?/45 http://www.securityfocus.com/bid/29812	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2862`	vulnerable	2026-06-08 04:50:32.446874	Details available Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to ansFAQ.asp and the (2) template_id parameter to preview.asp. Published: 2008-06-25T10:00:00.000Z Updated: 2024-08-07T09:14:14.959Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3957 https://www.exploit-db.com/exploits/5859 http://osvdb.org/46461 http://www.bugreport.ir/?/45 http://www.securityfocus.com/bid/29812	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2861`	vulnerable	2026-06-08 04:50:32.445627	Details available Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) button parameters to ansFAQ.asp and the (3) id and (4) txtEmail parameters to login.asp. Published: 2008-06-25T10:00:00.000Z Updated: 2024-08-07T09:14:14.992Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3957 https://www.exploit-db.com/exploits/5859 https://exchange.xforce.ibmcloud.com/vulnerabilities/43191 http://www.securityfocus.com/bid/29812 http://www.securityfocus.com/archive/1/493473/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Site Composer

Notes

PURL mappings

Vulnerability references

Contribute