Ecjia Daojia 1.38.1-20210202629
Approved changes feed: RSS · Atom
cpe:2.3:a:ecjia:daojia:1.38.1-20210202629:*:*:*:*:*:*:*part: a version: 1.38.1-20210202629 update: *
| Vendor | Ecjia (e08ad014-19c4-5ca6-bac3-13dff1d3a764) |
|---|---|
| Product | Daojia (c7f52f41-d6c9-5d1b-8728-a44630f9f431) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ecjia/ecjia-daojia |
purl2cpe | 2026-06-01 10:15:26.941436 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-27055 |
vulnerable | 2026-06-08 05:41:54.798485 |
Details available
ecjia-daojia 1.38.1-20210202629 is vulnerable to information leakage via content/apps/installer/classes/Helper.php. When the web program is installed, a new environment file is created, and the database information is recorded, including the database record password. NOTE: the vendor disputes this because the environment file is in the data directory, which is not intended for access by website visitors (only the statics directory can be accessed by website visitors)
Published: 2022-04-19T16:47:28.000Z
Updated: 2024-08-03T05:18:39.306Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.