Approved changes feed: RSS · Atom

cpe:2.3:a:ilch:ilch_cms:2.1.22:*:*:*:*:*:*:*

part: a version: 2.1.22 update: *

VendorIlch (8b7f396f-1575-5a2d-9c2b-c968eec89e94)
ProductIlch Cms (493fa902-365c-5cc4-b022-9e3e8d9c6266)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ilchcms/ilch-2.0 purl2cpe 2026-06-01 10:12:25.585114

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-17046 vulnerable 2026-06-08 05:13:09.811574 Details available
Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.
Published: 2019-09-30T14:04:57.000Z
Updated: 2024-08-05T01:33:15.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17045 vulnerable 2026-06-08 05:13:09.811080 Details available
Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.
Published: 2019-09-30T14:04:48.000Z
Updated: 2024-08-05T01:33:16.642Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.