Approved changes feed: RSS · Atom

cpe:2.3:a:pommo:pommo-ardvark:pr16.1:*:*:*:*:*:*:*

part: a version: pr16.1 update: *

VendorPommo (8b01a09f-86dc-5315-871e-7ee59b67ce78)
ProductPommo Ardvark (d5733f7d-ac47-569f-a231-d364b9d1f84a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-5300 vulnerable 2026-06-08 04:59:35.492373 Details available
Cross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo Aardvark PR16.1 allows remote attackers to hijack the authentication of administrators for requests that modify credentials via certain admin_ parameters.
Published: 2015-01-01T11:00:00.000Z
Updated: 2024-09-17T03:23:46.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5299 vulnerable 2026-06-08 04:59:35.492017 Details available
Multiple cross-site scripting (XSS) vulnerabilities in poMMo Aardvark PR16.1 allow remote attackers to inject arbitrary web script or HTML via (1) the referer parameter to index.php, (2) the site_name parameter to admin/setup/config/general.php, (3) the group_name parameter to admin/subscribers/subscribers_groups.php, or (4) the field_name parameter to admin/setup/setup_fields.php.
Published: 2015-01-01T11:00:00.000Z
Updated: 2024-09-16T17:07:39.247Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.