Bpowerhouse

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Bpowerhouse records in CISA KEV

No Bpowerhouse vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mini Cms 2 records LOW Bpgames 1 record LOW Bpholidaylettings 1 record LOW Bplawyercasedocuments 1 record LOW Bpmusic 1 record LOW Bpstudents 1 record LOW Mini Blog 1 record LOW

Records

8 records

TI-2008-05310 CVE-2008-5594 · GHSA-9rvq-m3f8-xc54

Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote…

LOW 38

Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02501 Published 2008-12-16 No fix listed CWE-22

TI-2008-05309 CVE-2008-5593 · GHSA-75j6-jvxw-6f7f

Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote…

LOW 37

Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02426 Published 2008-12-16 No fix listed CWE-22

TI-2009-03341 CVE-2009-3503 · GHSA-g5r9-wgq9-7qh8

Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings…

LOW 35

Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) rid and (2) tid parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01109 Published 2009-09-30 No fix listed CWE-89

TI-2009-03340 CVE-2009-3502 · GHSA-fgmw-jj4f-5935

SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote…

LOW 35

SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote attackers to execute arbitrary SQL commands via the music_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2009-09-30 No fix listed CWE-89

TI-2009-03339 CVE-2009-3501 · GHSA-4vp8-fm4w-fw2f

SQL injection vulnerability in students.php in BPowerHouse BPStudents 1.0 allows remote…

LOW 35

SQL injection vulnerability in students.php in BPowerHouse BPStudents 1.0 allows remote attackers to execute arbitrary SQL commands via the test parameter in a preview action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01199 Published 2009-09-30 No fix listed CWE-89

TI-2009-03338 CVE-2009-3500 · GHSA-rgc3-jjp2-xqh3

Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to main.php and (2) game_id parameter to game.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2009-09-30 No fix listed CWE-89

TI-2009-03337 CVE-2009-3499 · GHSA-vjg8-mp98-7f39

SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0…

LOW 35

SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2009-09-30 No fix listed CWE-89

TI-2009-04296 CVE-2009-4540 · GHSA-54xj-3r77-hfh9

SQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to…

LOW 32

SQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00903 Published 2010-01-04 No fix listed CWE-89

Open these records in search →

Critical	0
High	7
Medium	1
Low	0
No CVSS	0