GCVE - cpe:2.3:a:freelancerkit:freelancerkit:2.35:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:freelancerkit:freelancerkit:2.35:*:*:*:*:*:*:*

part: a version: 2.35 update: *

Vendor	Freelancerkit (`aa7bef3b-f996-58d5-8dd9-6760af08e5fc`)
Product	Freelancerkit (`578d8de4-1cc4-5256-a8f3-619be49a8fdd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1219`	vulnerable	2026-06-08 05:00:48.247418	Details available Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the (1) ticket parameter to tickets.php, (2) title parameter to notes.php, or (3) task parameter to todo.php. NOTE: some of these details are obtained from third party information. Published: 2012-02-21T00:00:00.000Z Updated: 2024-08-06T18:53:36.266Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/73104 http://www.securityfocus.com/bid/51946 http://www.vulnerability-lab.com/get_content.php?id=402 http://secunia.com/advisories/47766	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1218`	vulnerable	2026-06-08 05:00:48.247036	Details available Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to the (1) notes and (2) tickets components. Published: 2012-02-21T00:00:00.000Z Updated: 2024-08-06T18:53:36.537Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/73105 http://www.securityfocus.com/bid/51946 http://www.vulnerability-lab.com/get_content.php?id=402 http://secunia.com/advisories/47766	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.