Known Vulnerabilities for products from Papoo
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Papoo".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-29054 json | Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface. This affects Papoo CMS Ligh... | 8.8 - HIGH | 2021-04-13 | 2021-04-21 |
| CVE-2014-9522 json | Multiple cross-site scripting (XSS) vulnerabilities in CMS Papoo Light 6.0.0 (Rev 4701) allow remote attackers to inject arbi... | Not Provided | 2015-01-05 | 2026-05-06 |
| CVE-2009-0735 json | Directory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when register_globals is enabled and mag... | Not Provided | 2009-02-25 | 2026-04-23 |
| CVE-2008-3724 json | SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via ... | Not Provided | 2008-08-20 | 2026-04-23 |
| CVE-2007-3494 json | Papoo CMS 3.6, and possibly earlier, does not verify user privileges when accessing the backend administration plugins, which... | Not Provided | 2007-06-29 | 2026-04-23 |
| CVE-2007-3453 json | SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via... | Not Provided | 2007-06-27 | 2026-04-23 |
| CVE-2007-3269 json | Multiple cross-site scripting (XSS) vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbit... | Not Provided | 2007-06-19 | 2026-04-23 |
| CVE-2007-2320 json | SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL command... | Not Provided | 2007-04-26 | 2026-04-23 |
| CVE-2006-3572 json | SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary SQL co... | 7.5 - HIGH | 2006-07-13 | 2018-10-18 |
| CVE-2006-3571 json | Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3 and earlier allow remote attackers to... | 2.6 - LOW | 2006-07-13 | 2018-10-18 |
| CVE-2006-1918 json | Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or H... | Not Provided | 2006-04-20 | 2025-04-03 |
| CVE-2006-1766 json | Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary S... | Not Provided | 2006-04-13 | 2025-04-03 |
| CVE-2006-0569 json | Cross-site scripting (XSS) vulnerability in user_class.php in Papoo 2.1.4 and earlier allows remote attackers to inject arbit... | Not Provided | 2006-02-07 | 2025-04-03 |
| CVE-2005-4478 json | Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands vi... | Not Provided | 2005-12-22 | 2025-04-03 |
Known software with vulnerabilities from Papoo
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Papoo | Cms Papoo Light | 6.0.0 |