Approved changes feed: RSS · Atom
cpe:2.3:a:hundred_plus:eip_plus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hundred Plus (5045057e-d12a-596e-99e8-bf5e5f775d0f) |
|---|---|
| Product | Eip Plus (8a8e9f20-6c51-540e-9c1a-2728f252b749) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-12867 |
vulnerable | 2026-06-08 07:04:31.110551 |
Hundred Plus｜EIP Plus - Arbitrary File Uplaod
HIGH (7.2)
EIP Plus developed by Hundred Plus has an Arbitrary File Uplaod vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Published: 2025-11-10T03:02:49.313Z
Updated: 2025-11-12T16:50:21.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12866 |
vulnerable | 2026-06-08 07:04:31.110004 |
Hundred Plus｜EIP Plus - Weak Password Recovery Mechanism
CRITICAL (9.8)
EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password.
Published: 2025-11-10T02:45:26.739Z
Updated: 2025-11-12T16:50:58.724Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.