Approved changes feed: RSS · Atom

cpe:2.3:a:projectpier:projectpier:0.8.8:*:*:*:*:*:*:*

part: a version: 0.8.8 update: *

VendorProjectpier (93e4cec5-2e8f-5164-a85d-030ce8e4b1a5)
ProductProjectpier (6fb41502-8bb7-5fa5-a927-75db847c2a76)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/project-pier/projectpier-core purl2cpe 2026-06-01 10:13:42.898897
pkg:github/projectpier/projectpier purl2cpe 2026-06-01 10:13:42.898896
pkg:sourceforge/projectpier purl2cpe 2026-06-01 10:13:42.898899

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2796 vulnerable 2026-06-08 05:06:35.846402 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the search_for parameter to (1) search_by_tag.php, (2) search_contacts.php, or (3) search.php.
Published: 2018-02-02T21:00:00.000Z
Updated: 2024-08-06T05:24:38.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3637 vulnerable 2026-06-08 05:04:32.431374 Details available
ProjectPier 0.8.8 does not use the Secure flag for cookies
Published: 2020-02-07T14:38:48.000Z
Updated: 2024-08-06T16:14:56.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3636 vulnerable 2026-06-08 05:04:32.431068 Details available
ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag
Published: 2020-02-07T14:34:40.000Z
Updated: 2024-08-06T16:14:56.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3635 vulnerable 2026-06-08 05:04:32.430640 Details available
ProjectPier 0.8.8 has stored XSS
Published: 2020-02-07T14:31:22.000Z
Updated: 2024-08-06T16:14:56.565Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.