GCVE - cpe:2.3:a:bosdev:bosdates:4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bosdev:bosdates:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

Vendor	Bosdev (`87b70221-02f3-5a5a-b5e3-d0d986e686e1`)
Product	Bosdates (`2ccd89f4-dd28-5461-9cff-187ae375491b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-1211`	vulnerable	2026-06-08 04:50:19.668411	Details available Cross-site scripting (XSS) vulnerability in BosDates 3.x and 4.x allows remote attackers to inject arbitrary web script or HTML via (1) the type parameter in calendar.php and (2) the category parameter in calendar_search.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2008-03-08T00:00:00.000Z Updated: 2024-08-07T08:17:33.370Z Open on db.gcve.eu Reference links http://secunia.com/advisories/29255 https://exchange.xforce.ibmcloud.com/vulnerabilities/41020 http://www.securityfocus.com/bid/28117	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3957`	vulnerable	2026-06-08 04:49:10.597732	Details available PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter. Published: 2006-08-01T21:00:00.000Z Updated: 2024-09-16T20:42:16.615Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19191 http://www.jaascois.com/exploits/18602020 http://securitytracker.com/id?1016585	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3911`	vulnerable	2026-06-08 04:48:42.515051	Details available Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) category parameters. Published: 2005-11-30T11:00:00.000Z Updated: 2024-08-07T23:31:48.043Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2005/2632 http://secunia.com/advisories/17752 http://www.securityfocus.com/bid/15632 http://www.osvdb.org/21173 http://pridels0.blogspot.com/2005/11/bosdates-v40-sql-vuln.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.