Approved changes feed: RSS · Atom
cpe:2.3:a:paijp:nophp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Paijp (6866ea61-38f6-5abd-bd87-bd3556e8a044) |
|---|---|
| Product | Nophp (070504e5-da34-5e86-a2a1-9b4b1ba00123) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-28854 |
vulnerable | 2026-06-08 06:02:36.538581 |
nophp vulnerable to shell command injection on httpd user when sending a password-setting mail or mail-login mail
HIGH (8)
nophp is a PHP web framework. Prior to version 0.0.1, nophp is vulnerable to shell command injection on httpd user. A patch was made available at commit e5409aa2d441789cbb35f6b119bef97ecc3986aa on 2023-03-30. Users should update index.php to 2023-03-30 or later or, as a workaround, add a function such as `env_patchsample230330.php` to env.php.
Published: 2023-04-03T17:55:56.789Z
Updated: 2025-02-11T14:35:47.164Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.