Vulnerabilities

TI-2008-02385 CVE-2008-2493 · GHSA-qv27-5h25-jm56

Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4…

LOW 23

Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML via the review parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01449 Published 2008-05-28 No fix listed CWE-79

TI-2008-02384 CVE-2008-2492 · GHSA-ch5w-v53r-gr3x

Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to post3/view.asp and the (2) review parameter to post3/book.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00969 Published 2008-05-28 No fix listed CWE-89

TI-2008-02371 CVE-2008-2479 · GHSA-qghf-h6vw-w7q4

Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute…

LOW 32

Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) kind parameter to fix/browse.php and the (2) account parameter to auth/00_pass.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00949 Published 2008-05-28 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4…

Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote…

Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute…