Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:content_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductContent Management System (57052157-361e-5e48-8423-91b7d0512f32)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-10265 vulnerable 2026-06-08 07:47:13.729428 itsourcecode Content Management System edit_topic.php sql injection
MEDIUM (6.3)
A vulnerability was identified in itsourcecode Content Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_topic.php. Such manipulation of the argument topic_id leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2026-06-01T14:30:10.820Z
Updated: 2026-06-01T19:27:58.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10258 vulnerable 2026-06-08 07:47:13.721959 itsourcecode Content Management System add_sub_topic.php sql injection
MEDIUM (6.3)
A weakness has been identified in itsourcecode Content Management System 1.0. Impacted is an unknown function of the file /admin/add_sub_topic.php. This manipulation of the argument topic_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-06-01T12:45:08.225Z
Updated: 2026-06-03T14:50:37.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10257 vulnerable 2026-06-08 07:47:13.721666 itsourcecode Content Management System update_ss_img.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown processing of the file /admin/update_ss_img.php. The manipulation of the argument topic_id results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-06-01T12:30:10.876Z
Updated: 2026-06-02T15:14:07.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10256 vulnerable 2026-06-08 07:47:13.721356 itsourcecode Content Management System save_comment.php sql injection
MEDIUM (6.3)
A vulnerability was identified in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /save_comment.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Published: 2026-06-01T12:15:08.471Z
Updated: 2026-06-01T18:23:54.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10242 vulnerable 2026-06-08 07:47:13.712202 itsourcecode Content Management System instructions.php sql injection
MEDIUM (6.3)
A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topic_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-06-01T08:45:08.494Z
Updated: 2026-06-01T14:52:48.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4311 vulnerable 2026-06-08 07:29:16.017742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4310 vulnerable 2026-06-08 07:29:16.017262 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4301 vulnerable 2026-06-08 07:29:15.999032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4300 vulnerable 2026-06-08 07:29:15.997993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.