Approved changes feed: RSS · Atom
cpe:2.3:a:bcoos:bcoos:1.0.10:*:*:*:*:*:*:*
part: a version: 1.0.10 update: *
| Vendor | Bcoos (3d188b41-43af-5f3f-8a22-67215b7e4ccd) |
|---|---|
| Product | Bcoos (e9fd8f4e-b1a2-5f48-ab04-94e94bf5cc52) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-7036 |
vulnerable | 2026-06-08 04:51:05.484129 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker module 0.20 for E-XooPS 1.0.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) direction and (2) order_by parameters.
Published: 2009-08-24T10:00:00.000Z
Updated: 2024-08-07T11:49:02.581Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6381 |
vulnerable | 2026-06-08 04:50:54.941874 |
Details available
SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter.
Published: 2009-03-02T19:00:00.000Z
Updated: 2024-08-07T11:27:35.607Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2350 |
vulnerable | 2026-06-08 04:50:23.554228 |
Details available
Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. (dot dot) or (2) C: folder sequences in the file parameter.
Published: 2008-05-20T10:00:00.000Z
Updated: 2024-08-07T08:58:02.341Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6266 |
vulnerable | 2026-06-08 04:50:08.374603 |
Details available
Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to modules/arcade/index.php in a show_stats action, or the lid parameter to (2) modules/myalbum/ratephoto.php or (3) modules/mylinks/ratelink.php, different vectors than CVE-2007-5104.
Published: 2007-12-07T11:00:00.000Z
Updated: 2024-08-07T16:02:36.027Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6080 |
vulnerable | 2026-06-08 04:50:07.710719 |
Details available
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter. NOTE: it was later reported that 1.0.13 is also affected.
Published: 2007-11-21T22:00:00.000Z
Updated: 2024-08-07T15:54:26.570Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6079 |
vulnerable | 2026-06-08 04:50:07.709297 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5104 |
vulnerable | 2026-06-08 04:49:57.881213 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.