GCVE - cpe:2.3:a:diy-cms:diy-cms:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:diy-cms:diy-cms:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Diy Cms (`26a9b1c0-1d9a-5fae-a8c4-3db7e4d6e67b`)
Product	Diy Cms (`b07acc90-8000-5f64-a00a-278fe8aca717`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-6519`	vulnerable	2026-06-08 05:03:00.596141	Details available SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter to mod.php. Published: 2013-01-24T01:00:00.000Z Updated: 2024-08-06T21:28:39.990Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/18804 http://archives.neohapsis.com/archives/bugtraq/2012-04/0213.html http://www.securityfocus.com/bid/53266 http://secunia.com/advisories/49011 https://exchange.xforce.ibmcloud.com/vulnerabilities/75228	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6518`	vulnerable	2026-06-08 05:03:00.595738	Details available Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module. Published: 2013-01-24T01:00:00.000Z Updated: 2024-08-06T21:28:39.949Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/18804 http://archives.neohapsis.com/archives/bugtraq/2012-04/0213.html http://www.securityfocus.com/bid/53266 https://exchange.xforce.ibmcloud.com/vulnerabilities/75230 http://secunia.com/advisories/49011	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6517`	vulnerable	2026-06-08 05:03:00.595239	Details available Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) question parameter to in /modules/poll/add.php or (2) question or (3) answer parameter to modules/poll/edit.php. Published: 2013-01-24T01:00:00.000Z Updated: 2024-08-06T21:28:39.918Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/18804 https://exchange.xforce.ibmcloud.com/vulnerabilities/75229 http://archives.neohapsis.com/archives/bugtraq/2012-04/0213.html http://www.securityfocus.com/bid/53266 http://www.vulnerability-lab.com/get_content.php?id=518	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3206`	vulnerable	2026-06-08 04:55:13.713439	Details available Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang parameter to modules/guestbook/blocks/control.block.php, (2) main_module parameter to index.php, and (3) getFile parameter to includes/general.functions.php. Published: 2010-09-03T17:12:00.000Z Updated: 2024-08-07T03:03:18.534Z Open on db.gcve.eu Reference links http://packetstormsecurity.org/1008-exploits/diycms-rfi.txt http://www.exploit-db.com/exploits/14822 https://exchange.xforce.ibmcloud.com/vulnerabilities/61454	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.