← Back

Boolebox

boolebox

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Boolebox
boolebox
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-13247
1Boolebox
1Boolebox
Jun 17, 2026
Jun 24, 2020
N/A· v4
7.3 HIGH· v3
8.5 HIGH· v2
BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area.
CVE-2020-13248
1Boolebox
1Boolebox
Jun 17, 2026
Jun 24, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx.