Approved changes feed: RSS · Atom

cpe:2.3:a:gpeasy:gpeasy_cms:1.5:rc4:*:*:*:*:*:*

part: a version: 1.5 update: rc4

VendorGpeasy (b2d8b17a-27ea-50e2-be07-fd348a0926b0)
ProductGpeasy Cms (6f58ce2d-eecf-57bc-a388-89ca514097e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/dccafe/gpeasy-cms purl2cpe 2026-06-01 10:15:34.045299
pkg:github/typesetter/typesetter purl2cpe 2026-06-01 10:15:34.045300

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0807 vulnerable 2026-06-08 05:03:50.229445 Details available
Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a new_section action to index.php.
Published: 2014-03-28T15:00:00.000Z
Updated: 2024-08-06T14:41:47.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2039 vulnerable 2026-06-08 04:54:11.327258 Details available
Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an Admin_Users action to index.php. NOTE: some of these details are obtained from third party information.
Published: 2010-05-25T14:00:00.000Z
Updated: 2024-08-07T02:17:13.621Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.