GCVE - cpe:2.3:a:4homepages:4images:1.7.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:4homepages:4images:1.7.2:*:*:*:*:*:*:*

part: a version: 1.7.2 update: *

Vendor	4Homepages (`97415811-15b1-53db-b5ef-7cf34341cafa`)
Product	4Images (`db309d6f-83d9-5868-b90d-bd8bf2de7388`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2380`	vulnerable	2026-06-08 04:51:28.105534	Details available Cross-site scripting (XSS) vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable. Published: 2009-07-08T15:00:00.000Z Updated: 2024-08-07T05:52:13.558Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/35342 http://www.4homepages.de/forum/index.php?topic=25057.0 http://www.osvdb.org/55508 https://exchange.xforce.ibmcloud.com/vulnerabilities/51470 http://secunia.com/advisories/35639	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2132`	vulnerable	2026-06-08 04:51:26.833525	Details available Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter. Published: 2009-06-19T17:32:00.000Z Updated: 2024-09-17T03:17:21.399Z Open on db.gcve.eu Reference links http://secunia.com/advisories/35427 http://bbs.wolvez.org/topic/56/ http://www.4homepages.de/forum/index.php?topic=15186.0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2131`	vulnerable	2026-06-08 04:51:26.830878	Details available Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted user_homepage parameter to member.php, and then posting a comment associated with a picture. Published: 2009-06-19T17:32:00.000Z Updated: 2024-08-07T05:36:20.994Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/35342 http://osvdb.org/55092 http://secunia.com/advisories/35427 https://www.exploit-db.com/exploits/8936 https://exchange.xforce.ibmcloud.com/vulnerabilities/51090	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.