Approved changes feed: RSS · Atom

cpe:2.3:a:yerba:yerba:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYerba (e482d15b-4dd8-53a2-b408-4d25be6b3f26)
ProductYerba (e9c10acf-d384-5829-ac20-1489e0669c67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5873 vulnerable 2026-06-08 04:50:53.427065 Details available
Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galleta[sesion] cookie that has a value beginning with 1:1: followed by a username.
Published: 2009-01-08T18:13:00.000Z
Updated: 2024-08-07T11:13:13.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4486 vulnerable 2026-06-08 04:50:39.100545 Details available
Directory traversal vulnerability in index.php in SAC.php (SACphp), as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter.
Published: 2008-10-08T01:00:00.000Z
Updated: 2024-08-07T10:17:09.755Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.