Approved changes feed: RSS · Atom

cpe:2.3:a:modernbill:modernbill:4.2.1:*:*:*:*:*:*:*

part: a version: 4.2.1 update: *

VendorModernbill (1ed80345-0e5e-586e-a675-74c4e3952fb3)
ProductModernbill (918424a9-719c-5727-ac99-08d0d3fbcaa7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5060 vulnerable 2026-06-08 04:50:49.342550 Details available
Multiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to (1) export_batch.inc.php, (2) run_auto_suspend.cron.php, and (3) send_email_cache.php in include/scripts/; (4) include/misc/mod_2checkout/2checkout_return.inc.php; and (5) include/html/nettools.popup.php, different vectors than CVE-2006-4034 and CVE-2005-1054.
Published: 2008-11-13T11:00:00.000Z
Updated: 2024-08-07T10:40:16.810Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5059 vulnerable 2026-06-08 04:50:49.340320 Details available
Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript event in the new_language parameter in a login action.
Published: 2008-11-13T11:00:00.000Z
Updated: 2024-08-07T10:40:17.233Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.