Approved changes feed: RSS · Atom

cpe:2.3:a:croogo:croogo:3.0.2:*:*:*:*:*:*:*

part: a version: 3.0.2 update: *

VendorCroogo (892f54f0-3e91-54ce-aba5-4cb478ce8eb7)
ProductCroogo (6963bba6-127b-5b0a-b87f-dc247bf90f25)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/croogo/croogo purl2cpe 2026-06-01 10:11:31.573795

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-29643 vulnerable 2026-06-08 06:33:29.198374 Details available
An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.
Published: 2025-04-18T00:00:00.000Z
Updated: 2025-04-22T15:08:13.519Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44673 vulnerable 2026-06-08 05:36:46.455226 Details available
A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a web shell script.
Published: 2022-03-10T18:04:16.000Z
Updated: 2024-08-04T04:25:16.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.