Planet Estream
Approved changes feed: RSS · Atom
cpe:2.3:a:planetestream:planet_estream:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Planetestream (009e2b05-897f-5aba-8136-ec5b2ad560f2) |
|---|---|
| Product | Planet Estream (ffa7ff5f-56fc-5501-9dd1-837a16fd4e03) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-45896 |
vulnerable | 2026-06-08 05:50:37.473854 |
Details available
Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document. Upload2.ashx can be used, or Ajax.asmx/ProcessUpload2. This leads to remote code execution.
Published: 2022-12-25T00:00:00.000Z
Updated: 2025-04-14T18:32:31.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45895 |
vulnerable | 2026-06-08 05:50:37.473441 |
Details available
Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie (findable in HTML source code for Default.aspx in some situations) and the WhoAmI endpoint (e.g., path disclosure).
Published: 2022-12-25T00:00:00.000Z
Updated: 2025-04-14T17:28:39.443Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45894 |
vulnerable | 2026-06-08 05:50:37.472899 |
Details available
GetFile.aspx in Planet eStream before 6.72.10.07 allows ..\ directory traversal to read arbitrary local files.
Published: 2022-12-25T00:00:00.000Z
Updated: 2025-04-14T17:33:49.779Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45893 |
vulnerable | 2026-06-08 05:50:37.472594 |
Details available
Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing the value of the ON cookie. A brute-force attack can calculate a value that provides permanent access.
Published: 2022-12-25T00:00:00.000Z
Updated: 2025-04-14T17:40:45.023Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45892 |
vulnerable | 2026-06-08 05:50:37.472190 |
Details available
In Planet eStream before 6.72.10.07, multiple Stored Cross-Site Scripting (XSS) vulnerabilities exist: Disclaimer, Search Function, Comments, Batch editing tool, Content Creation, Related Media, Create new user, and Change Username.
Published: 2022-12-25T00:00:00.000Z
Updated: 2025-04-14T17:43:33.926Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45891 |
vulnerable | 2026-06-08 05:50:37.471746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45890 |
vulnerable | 2026-06-08 05:50:37.471376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45889 |
vulnerable | 2026-06-08 05:50:37.470722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.