GCVE - cpe:2.3:a:carlos_desseno:youtube

Approved changes feed: RSS · Atom

cpe:2.3:a:carlos_desseno:youtube_blog:0.1:*:*:*:*:*:*:*

part: a version: 0.1 update: *

Vendor	Carlos Desseno (`27bda534-f02c-5057-95e2-dd6ef9828ae1`)
Product	Youtube Blog (`6cc5c093-39df-5373-8149-b135ccdf6e02`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-3308`	vulnerable	2026-06-08 04:50:34.085952	Details available PHP remote file inclusion vulnerability in cuenta/cuerpo.php in C. Desseno YouTube Blog (ytb) 0.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the base_archivo parameter. Published: 2008-07-25T16:00:00.000Z Updated: 2024-08-07T09:37:26.933Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4037 http://secunia.com/advisories/31161 https://exchange.xforce.ibmcloud.com/vulnerabilities/43952 https://www.exploit-db.com/exploits/6117 http://www.securityfocus.com/bid/30345	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3305`	vulnerable	2026-06-08 04:50:34.084108	Details available Cross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to inject arbitrary web script or HTML via the m parameter. Published: 2008-07-25T16:00:00.000Z Updated: 2024-08-07T09:37:26.380Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4037 https://exchange.xforce.ibmcloud.com/vulnerabilities/43953 http://secunia.com/advisories/31161 https://www.exploit-db.com/exploits/6117 http://www.securityfocus.com/bid/30345	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.