Tribiq Tribiq CMS 5.0.12c
Approved changes feed: RSS · Atom
cpe:2.3:a:tribiq:tribiq_cms:5.0.12c:*:*:*:*:*:*:*part: a version: 5.0.12c update: *
| Vendor | Tribiq (ea2c8329-c5b5-5118-a19e-1c21ca424b2c) |
|---|---|
| Product | Tribiq Cms (12d46bb6-a4b9-50b2-9059-fa40623be4ed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2220 |
vulnerable | 2026-06-08 04:51:27.319159 |
Details available
Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory traversal sequences in the template_path parameter to (1) masthead.inc.php, (2) toppanel.inc.php, and (3) contact.inc.php in templates/mytribiqsite/tribiq-CL-9000/includes; and the use_template_family parameter to (4) templates/mytribiqsite/tribiq-CL-9000/includes/nlarlist_content.inc.php. NOTE: the tribal-GPL-1066/includes/header.inc.php vector is already covered by CVE-2008-4894.
Published: 2009-06-26T15:00:00.000Z
Updated: 2024-08-07T05:44:55.691Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.