Approved changes feed: RSS · Atom

cpe:2.3:a:webatall:web\@all:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorWebatall (91fd25e1-a530-5ff8-aecb-605a57be15bf)
ProductWeb@All (c0e5b0fb-8d2e-5fb0-ae47-c5c5207ac495)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3232 vulnerable 2026-06-08 05:02:08.376603 Details available
Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject arbitrary web script or HTML via the _text[title] parameter.
Published: 2012-06-29T17:00:00.000Z
Updated: 2024-09-16T16:48:10.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3231 vulnerable 2026-06-08 05:02:08.376225 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding a file to execute arbitrary code via a do_addfile action to inc/browser/action.php.
Published: 2012-06-27T22:00:00.000Z
Updated: 2024-09-16T20:38:08.725Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.