Indexhibit 2.1.5
Approved changes feed: RSS · Atom
cpe:2.3:a:indexhibit:indexhibit:2.1.5:*:*:*:*:*:*:*part: a version: 2.1.5 update: *
| Vendor | Indexhibit (3d1260b8-8b45-519a-a52a-87cc1ca2e70a) |
|---|---|
| Product | Indexhibit (6712a06d-8aa1-583d-8c8c-d83ca7835ce7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/indexhibit/indexhibit |
purl2cpe | 2026-06-01 10:15:22.320369 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-18127 |
vulnerable | 2026-06-08 05:20:56.856630 |
Details available
An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files.
Published: 2021-08-30T16:04:39.000Z
Updated: 2024-08-04T14:00:48.908Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18126 |
vulnerable | 2026-06-08 05:20:56.856194 |
Details available
Multiple stored cross-site scripting (XSS) vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML.
Published: 2021-08-30T16:04:40.000Z
Updated: 2024-08-04T14:00:49.110Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18125 |
vulnerable | 2026-06-08 05:20:56.855700 |
Details available
A reflected cross-site scripting (XSS) vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML.
Published: 2021-08-30T16:04:47.000Z
Updated: 2024-08-04T14:00:49.268Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18124 |
vulnerable | 2026-06-08 05:20:56.855235 |
Details available
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily reset account passwords.
Published: 2021-08-30T16:04:43.000Z
Updated: 2024-08-04T14:00:49.116Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18123 |
vulnerable | 2026-06-08 05:20:56.854922 |
Details available
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily delete admin accounts.
Published: 2021-08-30T16:04:42.000Z
Updated: 2024-08-04T14:00:49.067Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18121 |
vulnerable | 2026-06-08 05:20:56.854416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8954 |
vulnerable | 2026-06-08 05:14:24.751638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16314 |
vulnerable | 2026-06-08 05:13:08.298015 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.