Havalite 1.1.7
Approved changes feed: RSS · Atom
cpe:2.3:a:havalite:havalite:1.1.7:*:*:*:*:*:*:*
part: a version: 1.1.7 update: *
| Vendor | Havalite (f7688a0d-78ea-5fc2-bf6f-2758804bd224) |
|---|---|
| Product | Havalite (980475b9-3ef7-5a04-97f6-646a28deaf7f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/havalite |
purl2cpe | 2026-06-01 10:14:44.712642 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-10055 |
vulnerable | 2026-06-08 05:03:51.926765 |
Havalite CMS Arbitary File Upload RCE
An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application fails to enforce proper file extension validation and authentication checks, allowing remote attackers to upload malicious PHP files via a crafted multipart/form-data POST request. Once uploaded, the attacker can access the file directly under havalite/tmp/files/, resulting in remote code execution.
Published: 2025-08-01T20:39:41.767Z
Updated: 2026-04-07T14:03:10.972Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0161 |
vulnerable | 2026-06-08 05:03:02.173483 |
Details available
Havalite CMS 1.1.7 has a stored XSS vulnerability
Published: 2020-01-29T14:54:30.000Z
Updated: 2024-08-06T14:18:09.320Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.