← Back

Logoshows

logoshows

4 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Logoshows Bbs
logoshows_bbs
4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-4872
1Logoshows
1Logoshows Bbs
Apr 29, 2026
May 11, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in globepersonnel_login.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields.
CVE-2009-4871
1Logoshows
1Logoshows Bbs
Apr 29, 2026
May 11, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
CVE-2009-4546
1Logoshows
1Logoshows Bbs
Apr 23, 2026
Jan 4, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) pb_username (aka pb%5Fusername) and (2) level cookies.
CVE-2009-4545
1Logoshows
1Logoshows Bbs
Apr 23, 2026
Jan 4, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb.