HumHub 1.3.10 Community Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:humhub:humhub:1.3.10:*:*:*:community:*:*:*
part: a version: 1.3.10 update: *
| Vendor | Humhub (207df78f-b45f-5aa6-92d9-43f6e5adcae3) |
|---|---|
| Product | Humhub (b59ff62f-0863-5fcb-b1d3-5eb2527f120a) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/jasoncain/humhub |
purl2cpe | 2026-06-01 10:15:38.356767 |
pkg:github/humhub/humhub |
purl2cpe | 2026-06-01 10:15:38.356768 |
pkg:rpm/opensuse/humhub |
purl2cpe | 2026-06-01 10:15:38.356770 |
pkg:sourceforge/humhub |
purl2cpe | 2026-06-01 10:15:38.356771 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9094 |
vulnerable | 2026-06-08 05:14:24.971703 |
Details available
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing JavaScript in the filename is echoed back in JavaScript code, which resulted in XSS.
Published: 2019-03-18T22:06:48.000Z
Updated: 2024-08-04T21:38:46.469Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9093 |
vulnerable | 2026-06-08 05:14:24.971314 |
Details available
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS.
Published: 2019-03-18T22:05:36.000Z
Updated: 2024-08-04T21:38:46.344Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.