GCVE - cpe:2.3:a:elinestudio:site_composer:2.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:elinestudio:site_composer:2.5:*:*:*:*:*:*:*

part: a version: 2.5 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-2864`	vulnerable	2026-06-08 04:50:32.447785	Details available eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) trigger.asp or (2) common2.asp in cms/include/, which reveals the database path. Published: 2008-06-25T10:00:00.000Z Updated: 2024-08-07T09:14:14.893Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3957 https://www.exploit-db.com/exploits/5859 http://www.bugreport.ir/?/45 https://exchange.xforce.ibmcloud.com/vulnerabilities/43192 http://www.securityfocus.com/archive/1/493473/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2861`	vulnerable	2026-06-08 04:50:32.446296	Details available Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) button parameters to ansFAQ.asp and the (3) id and (4) txtEmail parameters to login.asp. Published: 2008-06-25T10:00:00.000Z Updated: 2024-08-07T09:14:14.992Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3957 https://www.exploit-db.com/exploits/5859 https://exchange.xforce.ibmcloud.com/vulnerabilities/43191 http://www.securityfocus.com/bid/29812 http://www.securityfocus.com/archive/1/493473/100/0/threaded	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.