Boozt

boozt

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-11706 1Boozt 1Boozt May 13, 2026 Jul 28, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was chang...Show more The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was "At the moment that is an accepted risk. We only have https on the checkout part of the site."Show less
CVE-2002-0098 1Boozt 1Boozt Standard Apr 16, 2026 Mar 25, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2017-11706

1Boozt

May 13, 2026

Jul 28, 2017

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was "At the moment that is an accepted risk. We only have https on the checkout part of the site."Show less

CVE-2002-0098

1Boozt

1Boozt Standard

Apr 16, 2026

Mar 25, 2002

N/A· v4

N/A· v3

7.5 HIGH· v2

Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.