GCVE - cpe:2.3:a:lovecms:lovecms:1.6.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lovecms:lovecms:1.6.2:*:*:*:*:*:*:*

part: a version: 1.6.2 update: *

Vendor	Lovecms (`09a98fb7-a741-5f1a-af58-d1b41894e121`)
Product	Lovecms (`55751a1d-eaf0-56d3-82a8-84ec89ab3253`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-7062`	vulnerable	2026-06-08 04:51:05.521366	Details available Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/. Published: 2009-08-25T10:00:00.000Z Updated: 2024-08-07T11:49:02.646Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/46871 https://www.exploit-db.com/exploits/7233 http://secunia.com/advisories/32825 http://osvdb.org/50276	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5794`	vulnerable	2026-06-08 04:50:53.134314	Details available Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter. Published: 2008-12-31T11:00:00.000Z Updated: 2024-08-07T11:04:44.535Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/7022 https://exchange.xforce.ibmcloud.com/vulnerabilities/46452 http://securityreason.com/securityalert/4834 http://www.securityfocus.com/bid/32158	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5308`	not_vulnerable	2026-06-08 04:50:50.737799	Details available The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php. Published: 2008-12-02T11:00:00.000Z Updated: 2024-08-07T10:49:12.087Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4676 http://secunia.com/advisories/32758 http://www.vupen.com/english/advisories/2008/3243 http://osvdb.org/50067 http://www.securityfocus.com/bid/32435	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3509`	vulnerable	2026-06-08 04:50:35.109143	Details available LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, which allows remote attackers to change the configuration or execute arbitrary PHP code via addition of blocks, and other vectors. Published: 2008-08-07T20:00:00.000Z Updated: 2024-08-07T09:45:18.119Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/6210 http://secunia.com/advisories/31389 https://www.exploit-db.com/exploits/6209 https://exchange.xforce.ibmcloud.com/vulnerabilities/44226 http://www.securityfocus.com/bid/30562	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.