Approved changes feed: RSS · Atom

cpe:2.3:a:attachmax:dolphin:2.1.0:*:*:*:*:*:*:*

part: a version: 2.1.0 update: *

VendorAttachmax (c8bc0454-588c-59de-bb48-602f829d21ef)
ProductDolphin (128c0977-3bea-5e5b-b8f7-14aabc243967)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4207 vulnerable 2026-06-08 04:50:38.256778 Details available
Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information.
Published: 2008-09-24T14:00:00.000Z
Updated: 2024-08-07T10:08:35.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4206 vulnerable 2026-06-08 04:50:38.256443 Details available
PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter.
Published: 2008-09-24T14:00:00.000Z
Updated: 2024-08-07T10:08:34.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4205 vulnerable 2026-06-08 04:50:38.256019 Details available
SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a Search action to index.php. NOTE: some of these details are obtained from third party information.
Published: 2008-09-24T14:00:00.000Z
Updated: 2024-08-07T10:08:35.059Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.