BO
Vendor
Boonex
14
CVEs
0
On KEV
0
New 30D
Products
DO8.8
Dolphin
Boonex
9 CVEs0 on KEV0 new
OR–
Orca
Boonex
2 CVEs0 on KEV0 new
BA–
Barracuda
Boonex
1 CVEs0 on KEV0 new
BD–
Barracuda Directory
Boonex
1 CVEs0 on KEV0 new
RA–
Ray
Boonex
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-27969 | DO Dolphin Boonex | 4.8 | Mar 23 | Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter |
| CVE-2013-3638 | DO Dolphin Boonex | 8.8 | Feb 6 | SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'categories.php' |
| CVE-2014-4333 | DO Dolphin Boonex | – | Jun 19 | Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators… |
| CVE-2014-3810 | DO Dolphin Boonex | – | Jun 19 | SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the… |
| CVE-2012-0873 | DO Dolphin Boonex | – | Feb 23 | Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to… |
| CVE-2011-3728 | DO Dolphin Boonex | – | Sep 23 | Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated… |
| CVE-2009-2919 | OR Orca Boonex | – | Aug 21 | Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field |
| CVE-2008-5167 | OR Orca Boonex | – | Nov 19 | PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary… |
| CVE-2008-3167 | DO Dolphin Boonex | – | Jul 14 | Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the… |
| CVE-2008-3166 | RA Ray Boonex | – | Jul 14 | PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP… |
| CVE-2006-5410 | DO Dolphin Boonex | – | Oct 20 | PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the… |
| CVE-2006-4189 | DO Dolphin Boonex | – | Aug 17 | Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2)… |
| CVE-2006-2133 | BA Barracuda Boonex | – | May 1 | SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) link_dir_target and (2)… |
| CVE-2006-0833 | BD Barracuda Directory Boonex | – | Feb 22 | Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) Add… |