GCVE - cpe:2.3:a:syndeocms:syndeocms:2.6.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:syndeocms:syndeocms:2.6.0:*:*:*:*:*:*:*

part: a version: 2.6.0 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-5272`	vulnerable	2026-06-08 04:50:50.382696	Details available Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the template parameter to (1) starnet/editors/fckeditor/studenteditor.php; (2) starnet/modules/sn_news/edit_content.php, reached through starnet/index.php; and (3) starnet/modules/sn_newsletter/edit_content.php, reached through starnet/index.php. Published: 2008-11-28T18:26:00.000Z Updated: 2024-08-07T10:49:12.271Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4660 http://secunia.com/advisories/30602 http://www.securityfocus.com/bid/29644 https://www.exploit-db.com/exploits/5779 https://exchange.xforce.ibmcloud.com/vulnerabilities/42969	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5271`	vulnerable	2026-06-08 04:50:50.382307	Details available Cross-site scripting (XSS) vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter. Published: 2008-11-28T18:26:00.000Z Updated: 2024-08-07T10:49:11.998Z Open on db.gcve.eu Reference links http://secunia.com/advisories/30602 http://www.securityfocus.com/bid/29644 https://www.exploit-db.com/exploits/5779 https://exchange.xforce.ibmcloud.com/vulnerabilities/42970	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.