Approved changes feed: RSS · Atom

cpe:2.3:a:lepton-cms:lepton:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

VendorLepton Cms (af013ec0-8664-5501-bb95-12a1190865ab)
ProductLepton (0d047536-38e8-5d4c-a8ba-9cc8f0345987)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/lepton-project/lepton purl2cpe 2026-06-01 10:12:29.057331
pkg:gitlab/lepton-project/lepton purl2cpe 2026-06-01 10:12:29.057333

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1000 vulnerable 2026-06-08 05:00:46.943689 Details available
Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to admins/login/forgot/index.php, or the (2) display_name or (3) email parameter to account/preferences.php.
Published: 2012-02-20T19:00:00.000Z
Updated: 2024-09-17T00:02:22.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0999 vulnerable 2026-06-08 05:00:46.830845 Details available
SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the group_id parameter.
Published: 2012-02-20T19:00:00.000Z
Updated: 2024-09-16T22:19:45.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0998 vulnerable 2026-06-08 05:00:46.829874 Details available
Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the language parameter.
Published: 2012-02-20T19:00:00.000Z
Updated: 2024-09-16T23:40:39.011Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.