GCVE - cpe:2.3:a:dazhouda:lecms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dazhouda:lecms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dazhouda (`4c72952e-b1b0-5bec-9d27-7038be7fb806`)
Product	Lecms (`18599dee-8400-52e1-9494-cbd3f5205dc9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-3997`	vulnerable	2026-06-08 07:23:10.280570	dazhouda lecms Personal Information Page index.php cross-site request forgery MEDIUM (4.3) A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-profile-ajax-1 of the component Personal Information Page. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-04-28T02:31:04.028Z Updated: 2025-04-28T18:11:59.771Z Open on db.gcve.eu Reference links https://vuldb.com/?id.306333 https://vuldb.com/?ctiid.306333 https://vuldb.com/?submit.557956 https://github.com/dtwin88/cve-md/blob/main/lecms%20V3.0.3/lecms_4.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3979`	vulnerable	2026-06-08 07:23:10.255932	dazhouda lecms Password Change index.php cross-site request forgery MEDIUM (4.3) A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-password-ajax-1 of the component Password Change Handler. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-04-27T17:31:04.107Z Updated: 2025-04-28T13:46:11.755Z Open on db.gcve.eu Reference links https://vuldb.com/?id.306315 https://vuldb.com/?ctiid.306315 https://vuldb.com/?submit.557787 https://github.com/dtwin88/cve-md/blob/main/lecms%20V3.0.3/lecms_3.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3978`	vulnerable	2026-06-08 07:23:10.254332	dazhouda lecms user_set.htm information disclosure MEDIUM (4.3) A vulnerability was found in dazhouda lecms 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/view/default/user_set.htm. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-04-27T17:00:06.990Z Updated: 2025-04-28T13:47:10.343Z Open on db.gcve.eu Reference links https://vuldb.com/?id.306314 https://vuldb.com/?ctiid.306314 https://vuldb.com/?submit.557748 https://github.com/dtwin88/cve-md/blob/main/lecms%20V3.0.3/lecms_2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3806`	vulnerable	2026-06-08 07:23:09.927108	dazhouda lecms Edit Profile admin cross site scripting LOW (2.4) A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3. Affected by this issue is some unknown functionality of the file /admin of the component Edit Profile Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-04-19T16:31:04.599Z Updated: 2025-04-21T02:28:56.781Z Open on db.gcve.eu Reference links https://vuldb.com/?id.305660 https://vuldb.com/?ctiid.305660 https://vuldb.com/?submit.554977 https://github.com/dtwin88/cve-md/blob/main/lecms%20V3.0.3/lecms.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Lecms

Notes

PURL mappings

Vulnerability references

Contribute