Approved changes feed: RSS · Atom

cpe:2.3:a:merlix:educate_server:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorMerlix (00597a14-ad1d-5ceb-b692-c1f01b64a5db)
ProductEducate Server (b15574a1-22d5-5ae2-a2cf-114b59f2c763)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-6871 vulnerable 2026-06-08 04:51:05.045482 Details available
Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers to obtain unspecified sensitive information via a direct request.
Published: 2009-07-23T19:00:00.000Z
Updated: 2024-08-07T11:49:01.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6870 vulnerable 2026-06-08 04:51:05.045086 Details available
Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct request to (1) config.asp and (2) users.asp.
Published: 2009-07-23T19:00:00.000Z
Updated: 2024-08-07T11:49:02.193Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.