GCVE - cpe:2.3:a:dotclear:dotclear:2.12.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dotclear:dotclear:2.12.1:*:*:*:*:*:*:*

part: a version: 2.12.1 update: *

Vendor	Dotclear (`572f9c5b-c8b3-527c-9715-53310878ae99`)
Product	Dotclear (`0e191e6c-d0ec-5ad4-809b-fa2a66fde3cc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/dotclear/dotclear`	purl2cpe	2026-06-01 10:11:04.866617

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-5690`	vulnerable	2026-06-08 05:11:51.602213	Details available Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter (aka the page limit number). Published: 2018-01-14T04:00:00.000Z Updated: 2024-08-05T05:40:51.095Z Open on db.gcve.eu Reference links https://hg.dotclear.org/dotclear/rev/3b0b868d58b0 http://dev.dotclear.org/2.0/changeset/3b0b868d58b00a1b216e0dc13c461bb3550ed3da	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-5689`	vulnerable	2026-06-08 05:11:51.601804	Details available Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email. Published: 2018-01-14T04:00:00.000Z Updated: 2024-08-05T05:40:51.198Z Open on db.gcve.eu Reference links https://hg.dotclear.org/dotclear/rev/3b0b868d58b0 http://dev.dotclear.org/2.0/changeset/3b0b868d58b00a1b216e0dc13c461bb3550ed3da	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.