Approved changes feed: RSS · Atom

cpe:2.3:a:concept_intermedia:s@m_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorConcept Intermedia (2920476a-9dd0-5e64-a34a-10b113aeb3c3)
ProductS@M Cms (1dfdbffd-cba3-5284-ad65-8b54d8203fe0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3816 vulnerable 2026-06-08 06:43:51.593761 SQLi in S@M CMS
Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to a blind SQL Injection executed using the search bar.  Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.
Published: 2024-06-28T12:45:29.872Z
Updated: 2024-08-01T20:20:02.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3801 vulnerable 2026-06-08 06:43:51.573615 XSS in S@M CMS
Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.  Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.
Published: 2024-06-28T12:44:38.927Z
Updated: 2024-10-30T15:49:56.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3800 vulnerable 2026-06-08 06:43:51.572281 XSS in S@M CMS
Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names.  Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.
Published: 2024-06-28T12:43:48.664Z
Updated: 2025-03-13T19:52:53.938Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.