Badongo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Badongo records in CISA KEV

No Badongo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Campus Bulletin Board 2 records LOW Phpfix 1 record LOW

Records

3 records

TI-2008-02384 CVE-2008-2492 · GHSA-ch5w-v53r-gr3x

Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to post3/view.asp and the (2) review parameter to post3/book.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00969 Published 2008-05-28 No fix listed CWE-89

TI-2008-02371 CVE-2008-2479 · GHSA-qghf-h6vw-w7q4

Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute…

LOW 32

Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) kind parameter to fix/browse.php and the (2) account parameter to auth/00_pass.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00949 Published 2008-05-28 No fix listed CWE-89

TI-2008-02385 CVE-2008-2493 · GHSA-qv27-5h25-jm56

Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4…

LOW 23

Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML via the review parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01449 Published 2008-05-28 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0