SilverStripe 2.3.3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:silverstripe:silverstripe:2.3.3:*:*:*:*:*:*:*

part: a version: 2.3.3 update: *

VendorSilverstripe (fb3ee4e6-70c4-5017-82a7-81441bb33bd1)
ProductSilverstripe (a3b26fc2-6e91-5c07-b521-62f2382ac950)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/silverstripe/silverstripe-cms purl2cpe 2026-06-01 10:14:20.994011

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4968 vulnerable 2026-06-08 05:02:53.450537 Details available
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted string to the AbsoluteLinks, (2) BigSummary, (3) ContextSummary, (4) EscapeXML, (5) FirstParagraph, (6) FirstSentence, (7) Initial, (8) LimitCharacters, (9) LimitSentences, (10) LimitWordCount, (11) LimitWordCountXML, (12) Lower, (13) LowerCase, (14) NoHTML, (15) Summary, (16) Upper, (17) UpperCase, or (18) URL method in a template, different vectors than CVE-2012-0976.
Published: 2012-09-17T17:00:00.000Z
Updated: 2024-09-16T19:11:05.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4961 vulnerable 2026-06-08 04:59:34.064920 Details available
SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with the EDIT_PERMISSIONS permission to gain administrator privileges via a TreeMultiselectField that includes admin groups when adding a user to the selected groups.
Published: 2012-09-17T17:00:00.000Z
Updated: 2024-09-16T17:19:06.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4960 vulnerable 2026-06-08 04:59:34.064211 Details available
SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-09-17T17:00:00.000Z
Updated: 2024-09-17T00:52:26.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4959 vulnerable 2026-06-08 04:59:34.063474 Details available
SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL database using far east character encodings, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-09-17T17:00:00.000Z
Updated: 2024-09-17T02:10:53.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4958 vulnerable 2026-06-08 04:59:34.053333 Details available
Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to template placeholders, as demonstrated by a request to (1) admin/reports/, (2) admin/comments/, (3) admin/, (4) admin/show/, (5) admin/assets/, and (6) admin/security/.
Published: 2014-04-08T14:00:00.000Z
Updated: 2024-08-07T00:23:39.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5188 vulnerable 2026-06-08 04:56:32.422331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5187 vulnerable 2026-06-08 04:56:32.421637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5095 vulnerable 2026-06-08 04:56:32.142129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5094 vulnerable 2026-06-08 04:56:32.141502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5093 vulnerable 2026-06-08 04:56:32.140906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5091 vulnerable 2026-06-08 04:56:32.139823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5090 vulnerable 2026-06-08 04:56:32.139101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5089 vulnerable 2026-06-08 04:56:32.138124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5088 vulnerable 2026-06-08 04:56:32.127856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5087 vulnerable 2026-06-08 04:56:32.123971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5080 vulnerable 2026-06-08 04:56:32.103929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5079 vulnerable 2026-06-08 04:56:32.096093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5078 vulnerable 2026-06-08 04:56:32.095309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4824 vulnerable 2026-06-08 04:56:31.223343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4823 vulnerable 2026-06-08 04:56:31.218198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1593 vulnerable 2026-06-08 04:54:09.228386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.