Approved changes feed: RSS · Atom

cpe:2.3:a:wms_project:wms:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorWms Project (538cc7ba-4718-51de-9c06-a0d9739a99e8)
ProductWms (031ccd3b-771a-5933-8f21-91c223cf88e5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/feminer/wms purl2cpe 2026-06-01 10:11:20.177259

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-18544 vulnerable 2026-06-08 05:20:57.009609 Details available
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php".
Published: 2021-07-12T19:39:41.000Z
Updated: 2024-08-04T14:00:49.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18106 vulnerable 2026-06-08 05:20:56.844238 Details available
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.
Published: 2021-08-27T19:10:31.000Z
Updated: 2024-08-04T14:00:48.653Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.