GCVE - cpe:2.3:a:autosectools:v-cms:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:autosectools:v-cms:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Autosectools (`f8112506-6fd4-59fc-8179-e069edec7619`)
Product	V Cms (`c1952d27-2d34-58e4-ad82-e82b48ec8e3e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4828`	vulnerable	2026-06-08 04:59:33.234986	Details available Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in temp/. Published: 2011-12-15T02:00:00.000Z Updated: 2024-09-17T02:47:38.916Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/50706 http://bugs.v-cms.org/view.php?id=53 http://www.autosectools.com/Advisory/V-CMS-1.0-Arbitrary-Upload-236 http://bugs.v-cms.org/changelog_page.php http://secunia.com/advisories/46861	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4827`	vulnerable	2026-06-08 04:59:33.234580	Details available Multiple cross-site scripting (XSS) vulnerabilities in AutoSec Tools V-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) p parameter to redirect.php and (2) box parameter to includes/TrueColorPicker/index.php, which is not properly handled in includes/TrueColorPicker/class.TrueColorPicker.php. Published: 2011-12-15T02:00:00.000Z Updated: 2024-09-16T17:59:47.917Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/50706 http://www.autosectools.com/Advisory/V-CMS-1.0-Reflected-Cross-site-Scripting-234 http://secunia.com/advisories/46861	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4826`	vulnerable	2026-06-08 04:59:33.234099	Details available SQL injection vulnerability in session.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to process.php. NOTE: some of these details are obtained from third party information. Published: 2011-12-15T02:00:00.000Z Updated: 2024-09-16T18:43:51.645Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/50706 http://www.autosectools.com/Advisory/V-CMS-1.0-SQL-Injection-235 http://secunia.com/advisories/46861	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.