GCVE - cpe:2.3:a:moxa:softcms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:moxa:softcms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Moxa (`98e7f712-aaf6-5b76-a35e-6cb93ba6791f`)
Product	Softcms (`f65c9e21-47bc-5c4d-83d4-e38c477084a7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-9333`	vulnerable	2026-06-08 05:08:23.250311	Details available An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's privilege through specially crafted input (SQL INJECTION). Published: 2017-02-13T21:00:00.000Z Updated: 2024-08-06T02:50:36.963Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02 http://www.securityfocus.com/bid/94394	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9332`	vulnerable	2026-06-08 05:08:23.249901	Details available An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition. Published: 2017-02-13T21:00:00.000Z Updated: 2024-08-06T02:50:36.933Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02 http://www.securityfocus.com/bid/94394 https://www.exploit-db.com/exploits/40779/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8360`	vulnerable	2026-06-08 05:08:14.177197	Details available An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of arbitrary code. Published: 2017-02-13T21:00:00.000Z Updated: 2024-08-06T02:20:30.872Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02 http://www.securityfocus.com/bid/94394	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5792`	vulnerable	2026-06-08 05:07:57.798558	Details available SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields. Published: 2016-08-08T00:00:00.000Z Updated: 2024-08-06T01:15:09.039Z Open on db.gcve.eu Reference links http://www.zerodayinitiative.com/advisories/ZDI-16-463 http://www.securityfocus.com/bid/92262 https://ics-cert.us-cert.gov/advisories/ICSA-16-215-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6458`	vulnerable	2026-06-08 05:06:52.478440	Details available Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability. Published: 2019-03-21T19:23:47.000Z Updated: 2024-08-06T07:22:21.590Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6457`	vulnerable	2026-06-08 05:06:52.478095	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1000`	vulnerable	2026-06-08 05:06:24.789488	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.