Approved changes feed: RSS · Atom

cpe:2.3:a:phpaddedit:phpaddedit:1.3:*:*:*:*:*:*:*

part: a version: 1.3 update: *

VendorPhpaddedit (13df4268-4d8f-5b32-a18a-d0832104529a)
ProductPhpaddedit (e0d74fa8-bcd0-5d79-a5ec-5bf79052c521)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-6581 vulnerable 2026-06-08 04:50:55.461991 Details available
login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie parameter.
Published: 2009-04-02T15:00:00.000Z
Updated: 2024-08-07T11:34:47.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6313 vulnerable 2026-06-08 04:50:54.810817 Details available
Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter. NOTE: PHP remote file inclusion attacks are also likely.
Published: 2009-02-27T11:00:00.000Z
Updated: 2024-08-07T11:27:35.939Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.