GCVE - cpe:2.3:a:katywhitton:rankem:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:katywhitton:rankem:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Katywhitton (`e76e3a53-fd7e-5676-9378-845b9ccb0d84`)
Product	Rankem (`2da125bf-3215-5acf-86b1-9bd2ca48ecce`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-0249`	vulnerable	2026-06-08 04:51:08.512349	Details available Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for database/topsites.mdb. Published: 2009-01-22T16:00:00.000Z Updated: 2024-08-07T04:24:18.500Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/48070 https://www.exploit-db.com/exploits/7805	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0248`	vulnerable	2026-06-08 04:51:08.512001	Details available Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter. Published: 2009-01-22T16:00:00.000Z Updated: 2024-08-07T04:24:18.369Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/48071 http://www.securityfocus.com/bid/33324 https://www.exploit-db.com/exploits/7805 https://exchange.xforce.ibmcloud.com/vulnerabilities/48072	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5589`	vulnerable	2026-06-08 04:50:52.043048	Details available SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1) txtusername parameter (aka username field) or the (2) txtpassword parameter (aka password field). NOTE: some of these details are obtained from third party information. Published: 2008-12-16T18:00:00.000Z Updated: 2024-08-07T10:56:47.239Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/47114 http://secunia.com/advisories/33012 http://securityreason.com/securityalert/4746 http://www.securityfocus.com/bid/32686 https://www.exploit-db.com/exploits/7350	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5588`	vulnerable	2026-06-08 04:50:52.042651	Details available SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID parameter. Published: 2008-12-16T18:00:00.000Z Updated: 2024-08-07T10:56:47.245Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4740 https://www.exploit-db.com/exploits/7349 https://exchange.xforce.ibmcloud.com/vulnerabilities/47113 http://www.securityfocus.com/bid/32659	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.