Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:siemprecms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductSiemprecms (00a8d48f-def7-5d81-8f88-91fbdc31d6bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10116 vulnerable 2026-06-08 07:02:26.324962 SiempreCMS file_upload.php unrestricted upload
HIGH (7.3)
A vulnerability was identified in SiempreCMS up to 1.3.6. This vulnerability affects unknown code of the file /docs/admin/file_upload.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2025-09-09T01:02:07.390Z
Updated: 2025-09-09T19:22:32.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10115 vulnerable 2026-06-08 07:02:26.324535 SiempreCMS user_search_ajax.php sql injection
HIGH (7.3)
A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file user_search_ajax.php. This manipulation of the argument name/userName causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-09-09T00:32:09.580Z
Updated: 2025-09-09T19:22:00.698Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.