GCVE - cpe:2.3:a:lokicms:lokicms:0.3.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lokicms:lokicms:0.3.4:*:*:*:*:*:*:*

part: a version: 0.3.4 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-6643`	vulnerable	2026-06-08 04:51:04.465996	Details available LokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to administrative functions, which allows remote attackers to bypass intended restrictions and modify configuration settings via the LokiACTION parameter in a direct request to admin.php. Published: 2009-04-07T10:00:00.000Z Updated: 2024-08-07T11:34:47.362Z Open on db.gcve.eu Reference links http://osvdb.org/45866 http://www.securityfocus.com/bid/29448 https://exchange.xforce.ibmcloud.com/vulnerabilities/42766 http://www.securityfocus.com/archive/1/492877/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4662`	vulnerable	2026-06-08 04:50:47.558738	Details available Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter. Published: 2008-10-21T23:00:00.000Z Updated: 2024-08-07T10:24:20.742Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/492877/100/0/threaded http://securityreason.com/securityalert/4463 http://www.securityfocus.com/bid/31743 http://secunia.com/advisories/30472 https://exchange.xforce.ibmcloud.com/vulnerabilities/45843	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.