Badongo Campus Bulletin Board vulnerabilities
2 known vulnerabilities affecting badongo/campus_bulletin_board.
Total CVEs
2
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2008-2492P3HIGHCVSS 7.5PoCv3.42008-05-28
CVE-2008-2492 [HIGH] CWE-89 CVE-2008-2492: Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execut
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to post3/view.asp and the (2) review parameter to post3/book.asp.
nvd
CVE-2008-2493P4MEDIUMCVSS 4.3PoCv3.42008-05-28
CVE-2008-2493 [MEDIUM] CWE-79 CVE-2008-2493: Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remot
Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML via the review parameter.
nvd