GCVE - cpe:2.3:a:cce-interact:interact:2.4.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cce-interact:interact:2.4.1:*:*:*:*:*:*:*

part: a version: 2.4.1 update: *

Vendor	Cce Interact (`6a3b5588-38db-5ca9-a004-6ccac1e56cc2`)
Product	Interact (`501593a3-00fc-50f5-bf6e-d1c3f662a4a9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-3868`	vulnerable	2026-06-08 04:50:37.007213	Details available Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrators for requests that create super administrator accounts. Published: 2008-11-03T19:04:00.000Z Updated: 2024-08-07T09:53:00.360Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4537 https://exchange.xforce.ibmcloud.com/vulnerabilities/46269 http://secunia.com/advisories/32434 http://www.securityfocus.com/archive/1/497967/100/0/threaded http://secunia.com/secunia_research/2008-44/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3867`	vulnerable	2026-06-08 04:50:37.006916	Details available SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the email_user_key parameter. Published: 2008-11-03T19:04:00.000Z Updated: 2024-08-07T09:53:00.460Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4537 http://www.securityfocus.com/bid/32014 http://sourceforge.net/tracker/index.php?func=detail&aid=2208205&group_id=69681&atid=525406 http://secunia.com/advisories/32359 https://exchange.xforce.ibmcloud.com/vulnerabilities/46267	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3384`	vulnerable	2026-06-08 04:50:34.494601	Details available Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) module and (2) file parameters. Published: 2008-07-30T18:00:00.000Z Updated: 2024-08-07T09:37:26.953Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/43937 http://www.securityfocus.com/archive/1/494582/100/0/threaded https://www.exploit-db.com/exploits/6107 http://www.securityfocus.com/bid/30315 http://www.vupen.com/english/advisories/2008/2155/references	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Interact

Notes

PURL mappings

Vulnerability references

Contribute