Approved changes feed: RSS · Atom

cpe:2.3:a:geodesicsolutions:geocore_max:7.3.3:*:*:*:*:*:*:*

part: a version: 7.3.3 update: *

VendorGeodesicsolutions (1683365c-51f5-57c5-986c-32c273ed5dbb)
ProductGeocore Max (e626ca37-4ccf-5249-a13d-9a123d68d7c9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3871 vulnerable 2026-06-08 05:05:43.080563 Details available
Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (formerly GeoClassifieds and GeoAuctions) allow remote attackers to execute arbitrary SQL commands via the (1) c[password] or (2) c[username] parameter. NOTE: the b parameter to index.php vector is already covered by CVE-2006-3823.
Published: 2014-05-27T14:00:00.000Z
Updated: 2024-08-06T10:57:18.064Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.