Vulnerabilities

TI-2008-04486 CVE-2008-4703 · GHSA-59fg-6r63-prfr

SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-23 No fix listed CWE-89

TI-2007-05601 CVE-2007-5835 · GHSA-39x3-rj4g-g64f

Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an…

LOW 25

Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritte…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01202 Published 2007-11-05 No fix listed CWE-264

TI-2007-05600 CVE-2007-5834 · GHSA-6whp-q5hh-g76g

Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to…

LOW 22

Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in a news post.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2007-11-05 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to…

Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an…

Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to…