Approved changes feed: RSS · Atom
cpe:2.3:a:xoda:xoda:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Xoda (6cb54982-8956-5581-b3e3-33c21d0f7267) |
|---|---|
| Product | Xoda (14b615e8-4b56-5c3c-8309-2b88db32ad47) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-10045 |
vulnerable | 2026-06-08 05:00:46.910033 |
XODA 0.4.5 Arbitrary PHP File Upload
XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server. The flaw resides in the upload functionality, which fails to properly validate or restrict uploaded file types. By crafting a multipart/form-data POST request, an attacker can upload a .php file directly into the web-accessible files/ directory and trigger its execution via a subsequent GET request.
Published: 2025-08-08T18:14:08.705Z
Updated: 2026-04-07T14:02:40.322Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.