← Back

Ezboxx

ezboxx

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Ezboxx Portal System
ezboxx_portal_system
2 CVEs
Portal System Beta
portal_system_beta
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-0266
1Ezboxx
1Ezboxx Portal System
Apr 23, 2026
Jan 16, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter.
CVE-2007-0265
1Ezboxx
1Portal System Beta
Apr 23, 2026
Jan 16, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pic parameter to custom/piczoom.asp, (2) the no...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pic parameter to custom/piczoom.asp, (2) the nocatname parameter to boxx/user-upload.asp, or (3) the iid parameter to indexes/newscomments.asp.Show less
CVE-2007-0259
1Ezboxx
1Ezboxx Portal System
Apr 23, 2026
Jan 16, 2007
N/A· v4
N/A· v3
7.8 HIGH· v2
Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message.