GCVE - cpe:2.3:a:jexperts:channel_platform:5.0.33

Approved changes feed: RSS · Atom

cpe:2.3:a:jexperts:channel_platform:5.0.33_ccb:*:*:*:*:*:*:*

part: a version: 5.0.33_ccb update: *

Vendor	Jexperts (`bce7a774-992d-5dc9-9591-df6b188018de`)
Product	Channel Platform (`d6283b1f-4dac-5192-9742-64fb61ca9d71`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-8558`	vulnerable	2026-06-08 05:06:09.325327	Details available JExperts Channel Platform 5.0.33_CCB allows remote authenticated users to bypass access restrictions via crafted action and key parameters. Published: 2014-11-25T15:00:00.000Z Updated: 2024-08-06T13:18:48.543Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2014/Nov/10 http://packetstormsecurity.com/files/129010/JExperts-Tecnologia-Channel-Software-Privilege-Escalation.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8557`	vulnerable	2026-06-08 05:06:09.324928	Details available Multiple cross-site scripting (XSS) vulnerabilities in JExperts Channel Platform 5.0.33_CCB allow remote attackers to inject arbitrary web script or HTML via the (1) usuario.nome variable in an editarUsuario action to usuario.do or (2) titulo.form variable in a novoChamado action to ticket.do. Published: 2014-11-13T15:00:00.000Z Updated: 2024-08-06T13:18:48.368Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2014/Nov/9 https://exchange.xforce.ibmcloud.com/vulnerabilities/98532 http://www.securityfocus.com/bid/70967 http://packetstormsecurity.com/files/129009/JExperts-Tecnologia-Channel-Software-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.