GCVE - cpe:2.3:a:gxlcms:gxlcms:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gxlcms:gxlcms:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Gxlcms (`4a130499-8da5-5887-98fe-b6c9aa735532`)
Product	Gxlcms (`f114dcc1-348b-5e6a-82a9-47f80ce66951`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-18488`	vulnerable	2026-06-08 05:11:14.126802	Details available In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter. Published: 2018-10-18T21:00:00.000Z Updated: 2024-09-16T17:22:49.135Z Open on db.gcve.eu Reference links http://sunu11.com/2018/10/18/glxcms/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18487`	vulnerable	2026-06-08 05:11:14.126421	Details available In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in predictable database backup file locations. Published: 2018-10-18T21:00:00.000Z Updated: 2024-09-17T03:22:43.930Z Open on db.gcve.eu Reference links http://sunu11.com/2018/10/18/glxcms/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16437`	vulnerable	2026-06-08 05:11:04.851890	Details available Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator. Published: 2018-09-05T20:00:00.000Z Updated: 2024-08-05T10:24:32.462Z Open on db.gcve.eu Reference links http://bbs.gxlcms.com/forum.php?mod=viewthread&tid=787&extra=page%3D1 http://www.ttk7.cn/post-78.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16436`	vulnerable	2026-06-08 05:11:04.851471	Details available Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator. Published: 2018-09-05T20:00:00.000Z Updated: 2024-08-05T10:24:32.307Z Open on db.gcve.eu Reference links http://bbs.gxlcms.com/forum.php?mod=viewthread&tid=787&extra=page%3D1 http://www.ttk7.cn/post-77.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15177`	vulnerable	2026-06-08 05:10:53.869508	Details available In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account. Published: 2018-08-08T00:00:00.000Z Updated: 2024-08-05T09:46:25.387Z Open on db.gcve.eu Reference links https://gitee.com/gxlcms/gxlcms_news_system_2/issues/ILVLP	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.