Approved changes feed: RSS · Atom

cpe:2.3:a:spacetag:lacoodast:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSpacetag (b1b7bf7c-a04d-5eb7-a313-52a5bafa1ed3)
ProductLacoodast (3b8053f3-b11c-5382-868d-e1551390dbc4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3739 vulnerable 2026-06-08 04:50:36.239568 Details available
Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving upload of files containing XSS sequences.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:52:59.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3738 vulnerable 2026-06-08 04:50:36.239197 Details available
Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
Published: 2008-08-27T20:00:00.000Z
Updated: 2025-04-03T13:39:52.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3737 vulnerable 2026-06-08 04:50:36.238701 Details available
Unspecified vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to execute arbitrary PHP scripts, and delete files, read files, and possibly have unknown other impact.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:52:59.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3736 vulnerable 2026-06-08 04:50:36.237623 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (a) change passwords or (b) change configurations.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:52:59.249Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.