BO
Vendor
Bosscms
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-31613 | BO Bosscms Bosscms | 5.4 | Jun 10 | BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code." |
| CVE-2024-31609 | BO Bosscms Bosscms | 7.1 | Apr 25 | Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration |
| CVE-2024-22938 | BO Bosscms Bosscms | 7.8 | Jan 30 | Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component |
| CVE-2022-44937 | BO Bosscms Bosscms | 6.5 | Nov 28 | Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrator List module |
| CVE-2022-28606 | BO Bosscms Bosscms | 9.8 | May 5 | An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd |
