Boinc Server
Approved changes feed: RSS · Atom
cpe:2.3:a:universityofcalifornia:boinc_server:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Universityofcalifornia (3b0d757d-65ef-568d-8422-0ea53511a835) |
|---|---|
| Product | Boinc Server (bf41bf44-394a-5a63-997a-340f6be3afb1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/boinc/boinc-server-docker |
purl2cpe | 2026-06-01 10:11:38.473454 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0669 |
vulnerable | 2026-06-08 07:02:25.133024 |
BOINC Server Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in BOINC Server allows Cross Site Request Forgery.This issue affects BOINC Server: before 1.4.3.
Published: 2025-05-07T07:39:59.434Z
Updated: 2025-05-07T14:00:24.317Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0668 |
vulnerable | 2026-06-08 07:02:25.132279 |
BOINC Server Multiple SQL Injections
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: before 1.4.5.
Published: 2025-05-07T07:39:26.843Z
Updated: 2025-05-07T14:00:31.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0667 |
vulnerable | 2026-06-08 07:02:25.131734 |
BOINC Server Stored XSS Injection in pm.php
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7.
Published: 2025-05-07T07:38:50.926Z
Updated: 2025-05-07T14:00:39.686Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0666 |
vulnerable | 2026-06-08 07:02:25.131301 |
BOINC Server Stored XSS Injection in host_venue_action.php
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7.
Published: 2025-05-07T07:38:07.341Z
Updated: 2025-05-07T14:00:48.710Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000875 |
vulnerable | 2026-06-08 05:10:26.167390 |
Details available
Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutable Data vulnerability in Website Terms of Service Acceptance Page that can result in Access to any user account. This attack appear to be exploitable via Specially crafted URL. This vulnerability appears to have been fixed in 1.0.3.
Published: 2018-12-20T17:00:00.000Z
Updated: 2024-09-16T19:52:08.915Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.