Approved changes feed: RSS · Atom
cpe:2.3:a:xibosignage:xibo:2.1.0:*:*:*:*:*:*:*part: a version: 2.1.0 update: *
| Vendor | Xibosignage (b8bad0ec-1319-56ff-a244-a7a635496256) |
|---|---|
| Product | Xibo (cf603790-6008-5e34-84e6-a2a7353db5e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41944 |
vulnerable | 2026-06-08 06:43:55.713779 |
Sensitive Information Disclosure abusing SQL Injection in Xibo CMS proof of play report
MEDIUM (6.5)
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `report/data/proofofplayReport` API route inside the CMS. This allows an authenticated user to to obtain and modify arbitrary data from the Xibo database by injecting specially crafted values in to the `sortBy` parameter. Users should upgrade to version 3.3.12 or 4.0.14 which fix this issue.
Published: 2024-07-30T16:24:40.398Z
Updated: 2024-08-02T04:54:31.359Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41804 |
vulnerable | 2026-06-08 06:43:55.253463 |
Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formula
MEDIUM (6.5)
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API route inside the CMS responsible for Adding/Editing DataSet Column Formulas. This allows an authenticated user to to obtain and modify arbitrary data from the Xibo database by injecting specially crafted values in to the `formula` parameter. Users should upgrade to version 3.3.12 or 4.0.14 which fix this issue.
Published: 2024-07-30T15:51:53.961Z
Updated: 2024-08-02T04:46:52.668Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41803 |
vulnerable | 2026-06-08 06:43:55.252478 |
Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Filter
MEDIUM (4.9)
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CMS responsible for Filtering DataSets. This allows an authenticated user to to obtain arbitrary data from the Xibo database by injecting specially crafted values in to the API for viewing DataSet data. Users should upgrade to version 3.3.12 or 4.0.14 which fix this issue.
Published: 2024-07-30T15:49:51.716Z
Updated: 2024-08-02T04:46:52.683Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.