Vulnerabilities

TI-2009-02781 CVE-2009-2919 · GHSA-x6gm-v8jj-6pfw

Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote…

LOW 19

Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00883 Published 2009-08-21 No fix listed CWE-79

TI-2008-04918 CVE-2008-5167 · GHSA-4mwf-r2cw-r8wg

PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0…

MEDIUM 46

PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gConf[dir][layou…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03136 Published 2008-11-19 No fix listed CWE-94

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote…

PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0…