Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:simple_content_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductSimple Content Management System (09e83bf5-1cd9-581a-bfc0-fadae7cc1c57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-116623 vulnerable 2026-11-03 10:15:21.674838 code-projects Simple Content Management System Admin welcome.php authorization
HIGH (7.3)
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
Published: 2026-10-27T00:45:20.926Z
Updated: 2026-10-31T02:29:02.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6184 vulnerable 2026-06-08 08:07:04.528629 code-projects Simple Content Management System welcome.php cross site scripting
LOW (2.4)
A weakness has been identified in code-projects Simple Content Management System 1.0. This affects an unknown part of the file /web/admin/welcome.php. Executing a manipulation of the argument News Title can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-04-13T15:00:21.266Z
Updated: 2026-04-13T17:00:56.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6183 vulnerable 2026-06-08 08:07:04.528329 code-projects Simple Content Management System index.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-13T14:45:11.916Z
Updated: 2026-04-13T18:51:55.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6182 vulnerable 2026-06-08 08:07:04.527953 code-projects Simple Content Management System login.php sql injection
HIGH (7.3)
A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /web/admin/login.php. Such manipulation of the argument User leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2026-04-13T14:30:14.768Z
Updated: 2026-04-14T16:29:36.999Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.