Approved changes feed: RSS · Atom

cpe:2.3:a:pro3w:pro3w_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPro3W (f0c516e3-8d69-5bc1-9068-96b8ea7b65ff)
ProductPro3W Cms (6ff7537e-08b0-503f-8726-8181549a71c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15498 vulnerable 2026-06-08 07:06:36.314323 SQL Injection in Pro3W CMS
Pro3W CMS if vulnerable to SQL injection attacks. Improper neutralization of input provided into a login form allows an unauthenticated attacker to bypass authentication and gain administrative privileges.  This issue was identified in version 1.2.0 of this software. Due to lack of response from the vendor exact version range could not be determined, but the vulnerability should be eliminated in versions released in January 2026 and later.
Published: 2026-02-27T13:51:53.006Z
Updated: 2026-02-27T14:19:48.682Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.