BC
Product
Bcoos
by Bcoos · last CVE Aug 24, 2009
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Bcoos to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2008-7036
–
1%
Aug 24
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker module 0.20 for E-XooPS 1.0.8 and earlier,…
Affected: through 1.1.11; 1.0.9; 1.0.10; 1.0.11; 1.0.12; 1.0.13
CVE-2008-6381
–
2%
Mar 2
SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute…
Affected: through 1.0.13; 1.0.9; 1.0.10; 1.0.11; 1.0.12
CVE-2008-2350
–
3%
May 20
Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1)
Affected: 1.0.9; 1.0.10; 1.0.11; 1.0.12; 1.0.13
CVE-2007-6274
–
1%
Dec 7
Multiple cross-site scripting (XSS) vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remote attackers to inject arbitrary web…
Affected: through 1.0.10
CVE-2007-6266
–
1%
Dec 7
Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to modules/arcade/index.php…
Affected: 1.0.10
CVE-2007-6275
–
1%
Dec 7
SQL injection vulnerability in modules/adresses/ratefile.php in bcoos 1.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter, a…
Affected: through 1.0.10
CVE-2007-6080
–
1%
Nov 21
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter
Affected: 1.0.10
CVE-2007-6079
–
2%
Nov 21
Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a
Affected: 1.0.10
CVE-2007-5104
–
1%
Sep 26
SQL injection vulnerability in index.php in the Arcade module in bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a play_game action
Affected: 1.0.10
Showing 9