GCVE - cpe:2.3:a:octobercms:october:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:octobercms:october:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Octobercms (`50ac530a-7544-5bf4-b757-db1aeff0e595`)
Product	October (`51c55d07-6379-53f0-b3f3-ef5e6285377e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-1999009`	vulnerable	2026-06-08 05:11:15.088593	Details available October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function) that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend path is accessible. This vulnerability appears to have been fixed in Build 437. Published: 2018-07-23T15:00:00.000Z Updated: 2024-09-17T00:06:26.182Z Open on db.gcve.eu Reference links http://octobercms.com/support/article/rn-10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5613`	vulnerable	2026-06-08 05:06:50.552279	Details available Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612. Published: 2017-09-27T17:00:00.000Z Updated: 2024-08-06T06:59:02.688Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2015/07/22/3 https://github.com/octobercms/october/issues/1302 https://github.com/octobercms/october/commit/8a4ac533e5cd6b8f92e9ef19fbfbb2f505dc7a9a	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5612`	vulnerable	2026-06-08 05:06:50.551845	Details available Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image. Published: 2015-09-04T15:00:00.000Z Updated: 2024-08-06T06:59:02.682Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2015/07/22/3 https://github.com/octobercms/october/issues/1302 http://www.openwall.com/lists/oss-security/2015/07/21/5 https://github.com/octobercms/october/commit/8a4ac533e5cd6b8f92e9ef19fbfbb2f505dc7a9a	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.