GCVE - cpe:2.3:a:silverstripe:silverstripe:2.2.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:silverstripe:silverstripe:2.2.4:*:*:*:*:*:*:*

part: a version: 2.2.4 update: *

Vendor	Silverstripe (`fb3ee4e6-70c4-5017-82a7-81441bb33bd1`)
Product	Silverstripe (`a3b26fc2-6e91-5c07-b521-62f2382ac950`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/silverstripe/silverstripe-cms`	purl2cpe	2026-06-01 10:14:20.993978

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-5090`	vulnerable	2026-06-03 14:30:45.111193	Details available SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security. Published: 2012-08-26T18:00:00.000Z Updated: 2024-09-17T02:32:34.578Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/05/01/3 http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2 http://www.openwall.com/lists/oss-security/2012/04/30/1 http://www.openwall.com/lists/oss-security/2012/04/30/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5089`	vulnerable	2026-06-03 14:30:45.110201	Details available SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information. Published: 2012-08-26T18:00:00.000Z Updated: 2024-09-16T18:19:25.429Z Open on db.gcve.eu Reference links http://open.silverstripe.org/changeset/110757 http://www.openwall.com/lists/oss-security/2012/05/01/3 http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2 http://www.openwall.com/lists/oss-security/2012/04/30/1 http://www.openwall.com/lists/oss-security/2012/04/30/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1593`	vulnerable	2026-06-03 14:30:15.711072	Details available Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (1) the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (2) the Search parameter to forums/search (aka the search script). Published: 2010-04-28T23:00:00.000Z Updated: 2024-08-07T01:28:41.998Z Open on db.gcve.eu Reference links http://www.silverstripe.org/security-releases/ http://osvdb.org/61921 http://secunia.com/advisories/38347 http://osvdb.org/61923 http://www.securityfocus.com/archive/1/509139/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1433`	vulnerable	2026-06-03 14:29:35.558135	Details available SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter. Published: 2009-04-24T23:00:00.000Z Updated: 2024-09-17T00:55:49.405Z Open on db.gcve.eu Reference links http://open.silverstripe.com/wiki/ChangeLog/2.3.1 http://open.silverstripe.com/ticket/3721 http://www.securityfocus.com/bid/34485 http://secunia.com/advisories/34633 http://osvdb.org/53589	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.