Approved changes feed: RSS · Atom

cpe:2.3:a:boonex:dolphin:7.1.3:*:*:*:*:*:*:*

part: a version: 7.1.3 update: *

VendorBoonex (1384ec30-cb63-5dad-966e-6f198c66b3d8)
ProductDolphin (8083f889-a9a8-5e3e-b27e-276786ead9da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/boonex/dolphin.pro purl2cpe 2026-06-01 10:17:57.601694
pkg:sourceforge/boonex-dolphin purl2cpe 2026-06-01 10:17:57.601695

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4333 vulnerable 2026-06-08 05:05:44.599099 Details available
Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the members[] parameter, related to CVE-2014-3810.
Published: 2014-06-19T14:00:00.000Z
Updated: 2024-08-06T11:12:35.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3810 vulnerable 2026-06-08 05:05:42.862502 Details available
SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the members[] parameter. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-4333.
Published: 2014-06-19T14:00:00.000Z
Updated: 2024-08-06T10:57:17.208Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.