GCVE - cpe:2.3:a:sourcecodester:company_website_cms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:company_website_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sourcecodester (`f6c988b2-f9bb-51b9-8f02-f23eef2a7551`)
Product	Company Website Cms (`a70f6dae-cc7f-5451-87b2-43756e1bf1dd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-13561`	vulnerable	2026-06-08 07:04:32.505046	SourceCodester Company Website CMS index.php sql injection HIGH (7.3) A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Published: 2025-11-23T17:32:05.662Z Updated: 2025-11-24T21:08:22.099Z Open on db.gcve.eu Reference links https://vuldb.com/?id.333326 https://vuldb.com/?ctiid.333326 https://vuldb.com/?submit.696684 https://github.com/miwangdemaoxianzhe/CVE/issues/2 https://www.sourcecodester.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13560`	vulnerable	2026-06-08 07:04:32.503998	SourceCodester Company Website CMS reset-password.php sql injection HIGH (7.3) A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used. Published: 2025-11-23T17:02:06.082Z Updated: 2025-11-24T14:36:52.595Z Open on db.gcve.eu Reference links https://vuldb.com/?id.333325 https://vuldb.com/?ctiid.333325 https://vuldb.com/?submit.696637 https://github.com/miwangdemaoxianzhe/CVE/issues/1 https://www.sourcecodester.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5919`	vulnerable	2026-06-08 06:19:45.116585	SourceCodester Company Website CMS Create Blog Page createblog unrestricted upload MEDIUM (4.7) A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /dashboard/createblog of the component Create Blog Page. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-244310 is the identifier assigned to this vulnerability. Published: 2023-11-02T13:31:06.780Z Updated: 2025-02-27T18:51:23.492Z Open on db.gcve.eu Reference links https://vuldb.com/?id.244310 https://vuldb.com/?ctiid.244310 https://www.jianshu.com/p/a451953f36f1?v=1698808954608	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2769`	vulnerable	2026-06-08 05:43:36.438898	SourceCodester Company Website CMS contact cross site scripting LOW (3.5) A vulnerability, which was classified as problematic, has been found in SourceCodester Company Website CMS. This issue affects some unknown processing of the file /dashboard/contact. The manipulation of the argument phone leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206165 was assigned to this vulnerability. Published: 2022-08-11T11:50:34.000Z Updated: 2025-04-15T13:52:23.338Z Open on db.gcve.eu Reference links https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Company%20Website%20CMS%28XSS%29.md https://vuldb.com/?id.206165	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2765`	vulnerable	2026-06-08 05:43:36.434359	SourceCodester Company Website CMS settings improper authentication MEDIUM (6.3) A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/settings. The manipulation leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206161 was assigned to this vulnerability. Published: 2022-08-11T09:30:18.000Z Updated: 2025-04-15T13:52:44.593Z Open on db.gcve.eu Reference links https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Company%20Website%20CMS--.md https://vuldb.com/?id.206161	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2751`	vulnerable	2026-06-08 05:43:36.105906	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2750`	vulnerable	2026-06-08 05:43:36.105494	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2740`	vulnerable	2026-06-08 05:43:36.093671	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2736`	vulnerable	2026-06-08 05:43:36.086337	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2725`	vulnerable	2026-06-08 05:43:36.075613	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2702`	vulnerable	2026-06-08 05:43:36.043206	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2694`	vulnerable	2026-06-08 05:43:36.037306	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.