CVE-2008-4703

CVE-2008-4703 describes a SQL injection in BosDev BosNews 4.0, exploitable via the article parameter in news.php. Affected component: BosNews 4.0 (news.php) with the vulnerability in the handling of the article field. Root cause: improper input handling leading to SQL injection, enabling remote a...

CVE-2007-5834

CVE-2007-5834 is an XSS vulnerability in BosDev BosNews 4 that lets remote attackers inject arbitrary script/HTML via a SCRIPT element in a news post. Supported details from NVD: CVSS2 base score 4.3 (Medium), vector AV:N/AC:M/Au:N/C:N/I:P/A:N; attack requires network access, no authentication, b...

CVE-2007-5835

CVE-2007-5835 affects BosDev BosNews 4 and 5, where Install.php does not require authentication for replacing an existing installation or creating a new admin account. The described impact is denial of service via overwritten files and the possibility of obtaining administrative access. No explic...