GCVE - cpe:2.3:a:nottingham.ac:xerte_online

Approved changes feed: RSS · Atom

cpe:2.3:a:nottingham.ac:xerte_online_toolkits:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nottingham.Ac (`2e0d8ffe-573e-5978-8efd-276986a46eab`)
Product	Xerte Online Toolkits (`1dba60fa-c547-5ede-a4c9-d921de49ba1f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-44663`	vulnerable	2026-06-08 05:36:46.449615	Details available A Remote Code Execution (RCE) vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php. Published: 2022-02-24T19:01:13.000Z Updated: 2024-08-04T04:25:16.864Z Open on db.gcve.eu Reference links https://www.xerte.org.uk/index.php/en/news/blog/80-news/336-xerte-3-8-5-important-security-update-now-available https://github.com/thexerteproject/xerteonlinetoolkits/commit/694a591b5ab7f634f036afaac10397cf3677a98c https://riklutz.nl/2021/10/30/unauthenticated-file-upload-to-remote-code-execution-in-xerte/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44662`	vulnerable	2026-06-08 05:36:46.449199	Details available A Site Scripting (XSS) vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php. Published: 2022-02-24T18:53:16.000Z Updated: 2024-08-04T04:25:16.893Z Open on db.gcve.eu Reference links https://riklutz.nl/2021/10/30/reflected-xss-in-xerte/ https://www.xerte.org.uk/index.php/en/news/blog/80-news/336-xerte-3-8-5-important-security-update-now-available https://github.com/thexerteproject/xerteonlinetoolkits/commit/694a591b5ab7f634f036afaac10397cf3677a98c	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.