Approved changes feed: RSS · Atom

cpe:2.3:a:skybluecanvas:skybluecanvas:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

VendorSkybluecanvas (f18ac70f-814f-5aaa-8a6b-adc6262b87a8)
ProductSkybluecanvas (94a4cbe5-0b98-5c0c-95ef-7d7ad5cfebb9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2116 vulnerable 2026-06-08 04:51:26.803403 Details available
Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory contents via a .. (dot dot) in the dir parameter.
Published: 2009-06-18T21:00:00.000Z
Updated: 2024-08-07T05:36:21.003Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2115 vulnerable 2026-06-08 04:51:26.803084 Details available
admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message.
Published: 2009-06-18T21:00:00.000Z
Updated: 2024-08-07T05:36:20.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2114 vulnerable 2026-06-08 04:51:26.802695 Details available
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inject arbitrary web script or HTML via the (1) mgroup, (2) mgr, (3) objtype, (4) id, and (5) dir parameters.
Published: 2009-06-18T21:00:00.000Z
Updated: 2024-08-07T05:36:20.995Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.