Elxis Elxis CMS 2008.1 Revision 2204
Approved changes feed: RSS · Atom
cpe:2.3:a:elxis:elxis_cms:2008.1:revision_2204:*:*:*:*:*:*part: a version: 2008.1 update: revision_2204
| Vendor | Elxis (e814b148-aa52-59f2-b76c-25f570958268) |
|---|---|
| Product | Elxis Cms (c1a95723-075e-5f8d-b27f-b6073d0aa57a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-4649 |
vulnerable | 2026-06-08 04:50:47.501217 |
Details available
Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
Published: 2008-10-21T22:00:00.000Z
Updated: 2024-08-07T10:24:20.684Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4648 |
vulnerable | 2026-06-08 04:50:47.500834 |
Details available
Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO or the (2) option, (3) Itemid, (4) id, (5) task, (6) bid, and (7) contact_id parameters. NOTE: the error might be located in modules/mod_language.php, and index.php might be the interaction point.
Published: 2008-10-21T22:00:00.000Z
Updated: 2024-08-07T10:24:21.040Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.