GCVE - cpe:2.3:a:socialcms:socialcms:1.0.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:socialcms:socialcms:1.0.5:*:*:*:*:*:*:*

part: a version: 1.0.5 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:sourceforge/socialcms`	purl2cpe	2026-06-01 10:11:16.140544

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1781`	vulnerable	2026-06-08 05:00:50.916677	Details available Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) TREF_email_address or (2) TR_name parameters. Published: 2012-03-19T18:00:00.000Z Updated: 2024-08-06T19:08:38.472Z Open on db.gcve.eu Reference links http://osvdb.org/79457 https://exchange.xforce.ibmcloud.com/vulnerabilities/73442 http://packetstormsecurity.org/files/110043/SocialCMS-Cross-Site-Scripting-SQL-Injection.html http://www.securityfocus.com/bid/52109 http://secunia.com/advisories/48082	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1780`	vulnerable	2026-06-08 05:00:50.916249	Details available SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter. Published: 2012-03-19T18:00:00.000Z Updated: 2024-08-06T19:08:38.727Z Open on db.gcve.eu Reference links http://secunia.com/advisories/44313 http://packetstormsecurity.org/files/110043/SocialCMS-Cross-Site-Scripting-SQL-Injection.html https://exchange.xforce.ibmcloud.com/vulnerabilities/73440 http://osvdb.org/79458 http://www.securityfocus.com/bid/52109	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.