Approved changes feed: RSS · Atom

cpe:2.3:a:c-data:web_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorC Data (7ce54959-0838-546d-a668-902779625429)
ProductWeb Management System (e5860439-321e-5470-a614-456668b1aabd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3305 vulnerable 2026-06-08 06:09:39.104817 C-DATA Web Management System User Creation access control
HIGH (7.3)
A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability.
Published: 2023-06-18T07:31:03.795Z
Updated: 2024-08-02T06:48:08.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4257 vulnerable 2026-06-08 05:51:37.066179 C-DATA Web Management System GET Parameter jumpto.php argument injection
MEDIUM (6.3)
A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the argument hostname leads to argument injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214631.
Published: 2022-12-01T00:00:00.000Z
Updated: 2025-04-15T13:09:39.323Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.