Bosnews

bosnews

Vendor: Bosdev • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-4703 1Bosdev 1Bosnews Apr 23, 2026 Oct 23, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter.
CVE-2007-5835 1Bosdev 1Bosnews Apr 23, 2026 Nov 5, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritte...Show more Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritten files) and possibly obtain administrative access.Show less
CVE-2007-5834 1Bosdev 1Bosnews Apr 23, 2026 Nov 5, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in a news post.