Approved changes feed: RSS · Atom

cpe:2.3:a:gonafish:webstatcaffe:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGonafish (f2443048-75e3-55b9-879d-8815f5324e3c)
ProductWebstatcaffe (92d30c80-b0dd-5125-8626-b3246a69f6d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4718 vulnerable 2026-06-08 04:51:49.339767 Details available
SQL injection vulnerability in visitorduration.php in Gonafish WebStatCaffe allows remote attackers to execute arbitrary SQL commands via the nodayshow parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2010-03-15T21:00:00.000Z
Updated: 2024-09-16T19:05:16.534Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4717 vulnerable 2026-06-08 04:51:49.339397 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML via the (1) host parameter to stat/host.php, nodayshow parameter to (2) mostvisitpage.php and (3) visitorduration.php in stat/, (4) nopagesmost parameter to stat/mostvisitpagechart.php, and date parameter to (5) pageviewers.php, (6) pageviewerschart.php, and (7) referer.php in stat/.
Published: 2010-03-15T21:00:00.000Z
Updated: 2024-09-16T16:13:37.905Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.