BC
Product
Bcoos
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Bcoos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-7036 | – | Aug 24 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker module 0.20 for E-XooPS 1.0.8 and earlier,… Affected: through 1.1.11; 1.0.9; 1.0.10; 1.0.11; 1.0.12; 1.0.13 |
| CVE-2008-6381 | – | Mar 2 | SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute… Affected: through 1.0.13; 1.0.9; 1.0.10; 1.0.11; 1.0.12 |
| CVE-2008-2350 | – | May 20 | Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) Affected: 1.0.9; 1.0.10; 1.0.11; 1.0.12; 1.0.13 |
| CVE-2007-6274 | – | Dec 7 | Multiple cross-site scripting (XSS) vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remote attackers to inject arbitrary web… Affected: through 1.0.10 |
| CVE-2007-6266 | – | Dec 7 | Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to modules/arcade/index.php… Affected: 1.0.10 |
| CVE-2007-6275 | – | Dec 7 | SQL injection vulnerability in modules/adresses/ratefile.php in bcoos 1.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter, a… Affected: through 1.0.10 |
| CVE-2007-6080 | – | Nov 21 | SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter Affected: 1.0.10 |
| CVE-2007-6079 | – | Nov 21 | Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a Affected: 1.0.10 |
| CVE-2007-5104 | – | Sep 26 | SQL injection vulnerability in index.php in the Arcade module in bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a play_game action Affected: 1.0.10 |
Showing 9
