Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:simple_content_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductSimple Content Management System (09e83bf5-1cd9-581a-bfc0-fadae7cc1c57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6184 vulnerable 2026-06-08 08:07:04.528629 code-projects Simple Content Management System welcome.php cross site scripting
LOW (2.4)
A weakness has been identified in code-projects Simple Content Management System 1.0. This affects an unknown part of the file /web/admin/welcome.php. Executing a manipulation of the argument News Title can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-04-13T15:00:21.266Z
Updated: 2026-04-13T17:00:56.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6183 vulnerable 2026-06-08 08:07:04.528329 code-projects Simple Content Management System index.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-13T14:45:11.916Z
Updated: 2026-04-13T18:51:55.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6182 vulnerable 2026-06-08 08:07:04.527953 code-projects Simple Content Management System login.php sql injection
HIGH (7.3)
A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /web/admin/login.php. Such manipulation of the argument User leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2026-04-13T14:30:14.768Z
Updated: 2026-04-14T16:29:36.999Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.