Bosdev / Bosnews
3 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2008-4703 | SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter. | HIGH | 7.5 | Oct 23, 2008 |
| CVE-2007-5835 | Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which all… | MEDIUM | 5.0 | Nov 5, 2007 |
| CVE-2007-5834 | Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in a news post. | MEDIUM | 4.3 | Nov 5, 2007 |
Showing 1 to 3 of 3 CVEs