← Back

Bookmine

bookmine

Vendor: Infomining • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-3394
1Infomining
1Bookmine
Apr 23, 2026
Jul 31, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in search.cfm in BookMine allow remote attackers to inject arbitrary web script or HTML via the (1) gallery and (2) search_string parameters.
CVE-2008-3393
1Infomining
1Bookmine
Apr 23, 2026
Jul 31, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter.