Approved changes feed: RSS · Atom

cpe:2.3:a:sitex_cms_project:sitex_cms:0.7.3:beta:*:*:*:*:*:*

part: a version: 0.7.3 update: beta

VendorSitex Cms Project (829f1f50-9917-51de-90a3-7ff35909b61b)
ProductSitex Cms (7b85edbb-542a-5cce-9c24-27ab3472d0ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:sourceforge/sitex purl2cpe 2026-06-01 10:16:12.805764

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5156 vulnerable 2026-06-08 04:49:58.028224 Details available
Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php." and has an unknown extension, which is recognized as a .php file by the Apache HTTP server, a different vulnerability than CVE-2006-0658 and CVE-2006-2529.
Published: 2007-10-01T00:00:00.000Z
Updated: 2024-08-07T15:24:40.918Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.