PaperThin CommonSpot Content:8.0.1 Server
Approved changes feed: RSS · Atom
cpe:2.3:a:paperthin:commonspot_content_server:8.0.1:*:*:*:*:*:*:*part: a version: 8.0.1 update: *
| Vendor | Paperthin (507ffcc4-4e07-5da3-bcdd-5d2a57cb8819) |
|---|---|
| Product | Commonspot Content Server (b4ebd815-ea1e-5d16-8c4c-82c9f7020aed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/commonspot |
purl2cpe | 2026-06-01 10:16:40.715761 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-2874 |
vulnerable | 2026-06-08 05:05:30.104832 |
Details available
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via shell metacharacters in an unspecified context.
Published: 2014-04-15T23:00:00.000Z
Updated: 2024-09-16T16:27:24.917Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2873 |
vulnerable | 2026-06-08 05:05:30.104496 |
Details available
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files, which allows remote attackers to obtain sensitive server information by using a predictable name in a request for a file.
Published: 2014-04-15T23:00:00.000Z
Updated: 2024-09-17T02:57:37.139Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2872 |
vulnerable | 2026-06-08 05:05:30.104113 |
Details available
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain potentially sensitive information from a directory listing via unspecified vectors.
Published: 2014-04-15T23:00:00.000Z
Updated: 2024-09-16T17:48:50.776Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2871 |
vulnerable | 2026-06-08 05:05:30.103813 |
Details available
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remote attackers to obtain sensitive information by sniffing the network.
Published: 2014-04-15T23:00:00.000Z
Updated: 2024-09-16T17:14:07.124Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2870 |
vulnerable | 2026-06-08 05:05:30.103501 |
Details available
The default configuration of PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 uses cleartext for storage of credentials in a database, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified vectors.
Published: 2014-04-15T23:00:00.000Z
Updated: 2024-09-16T17:02:43.043Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2869 |
vulnerable | 2026-06-08 05:05:30.103184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2868 |
vulnerable | 2026-06-08 05:05:30.102875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2867 |
vulnerable | 2026-06-08 05:05:30.102569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2866 |
vulnerable | 2026-06-08 05:05:30.102253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2865 |
vulnerable | 2026-06-08 05:05:30.101937 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2864 |
vulnerable | 2026-06-08 05:05:30.101602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2863 |
vulnerable | 2026-06-08 05:05:30.101290 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2862 |
vulnerable | 2026-06-08 05:05:30.100962 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2861 |
vulnerable | 2026-06-08 05:05:30.100643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2860 |
vulnerable | 2026-06-08 05:05:30.100282 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2859 |
vulnerable | 2026-06-08 05:05:30.099359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.