GCVE - cpe:2.3:a:dflabs:ptk:1.0.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dflabs:ptk:1.0.5:*:*:*:*:*:*:*

part: a version: 1.0.5 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-5902`	vulnerable	2026-06-08 05:02:58.678811	Details available Cross-site scripting (XSS) vulnerability in ptk/lib/modal_bookmark.php in DFLabs PTK 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the arg4 parameter. Published: 2012-11-17T21:00:00.000Z Updated: 2024-08-06T21:21:27.938Z Open on db.gcve.eu Reference links http://packetstormsecurity.org/files/111360/PTK-1.0.5-Cross-Site-Scripting-Unrestricted-Access.html http://www.securityfocus.com/bid/52817 https://exchange.xforce.ibmcloud.com/vulnerabilities/74492 http://osvdb.org/80774	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5901`	vulnerable	2026-06-08 05:02:58.678416	Details available DFLabs PTK 1.0.5 stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read logs, images, or reports via a direct request to the file in the (1) log, (2) images, or (3) report directory. Published: 2012-11-17T21:00:00.000Z Updated: 2024-08-06T21:21:27.740Z Open on db.gcve.eu Reference links http://packetstormsecurity.org/files/111360/PTK-1.0.5-Cross-Site-Scripting-Unrestricted-Access.html http://www.securityfocus.com/bid/52817 https://exchange.xforce.ibmcloud.com/vulnerabilities/74491 http://secunia.com/advisories/48585 http://osvdb.org/80773	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.