Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
BosdevBosnews

3 matches found

CVE
CVE•added 2008/10/23 5:17 p.m.•32 views

CVE-2008-4703

SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter.

7.5CVSS8.4AI score0.00144EPSS
CVE
CVE•added 2007/11/05 7:46 p.m.•31 views

CVE-2007-5834

Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in a news post.

4.3CVSS5.7AI score0.00254EPSS
CVE
CVE•added 2007/11/05 7:46 p.m.•28 views

CVE-2007-5835

Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritten files) and possibly obtain administrative access.

5CVSS7.1AI score0.00677EPSS