Approved changes feed: RSS · Atom

cpe:2.3:a:saurus:saurus_cms:4.7.0:*:*:*:*:*:*:*

part: a version: 4.7.0 update: *

VendorSaurus (d96167c2-9965-5569-8cfd-cbbeed317f4e)
ProductSaurus Cms (f266bb7e-99b0-5b7b-bc7c-52a50262cc51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-1562 vulnerable 2026-06-08 05:06:25.843136 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to admin/user_management.php, (2) data_search parameter to /admin/profile_data.php, or (3) filter parameter to error_log.php.
Published: 2015-02-09T11:00:00.000Z
Updated: 2024-09-17T02:37:19.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1997 vulnerable 2026-06-08 04:54:11.185109 Details available
Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter.
Published: 2010-05-20T17:00:00.000Z
Updated: 2024-08-07T02:17:14.489Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.