Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2007-5834

Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in a news post.

CVSS 2.0 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Bosdev
Products
Bosnews
CVE-2007-5835

Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritten files) and possibly obtain administrative access.

CVSS 2.0 · 5.0 Medium EPSS 1.2% KEV · Not listed
Vendors
Bosdev
Products
Bosnews
CVE-2008-4703

SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Bosdev
Products
Bosnews