Approved changes feed: RSS · Atom

cpe:2.3:a:zenas:paolink:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorZenas (03e50684-d09f-5784-8f27-109ed72f659c)
ProductPaolink (4d0eac15-20b2-553c-90f4-6283a4bf1bfa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3423 vulnerable 2026-06-08 04:51:41.837586 Details available
login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.
Published: 2009-09-25T22:00:00.000Z
Updated: 2024-08-07T06:31:09.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3320 vulnerable 2026-06-08 04:51:33.303409 Details available
Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Published: 2009-09-23T10:00:00.000Z
Updated: 2024-08-07T06:22:24.340Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.