Logoshows Bbs
Approved changes feed: RSS · Atom
cpe:2.3:a:logoshows:logoshows_bbs:2.0:*:*:*:*:*:*:*part: a version: 2.0 update: *
| Vendor | Logoshows (0dfbcfc2-cef7-565e-ae3b-109da6d4c9e3) |
|---|---|
| Product | Logoshows Bbs (fafe818f-2020-581e-b812-56ca07147a5c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-4872 |
vulnerable | 2026-06-08 04:51:50.217023 |
Details available
Multiple SQL injection vulnerabilities in globepersonnel_login.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields.
Published: 2010-05-10T20:00:00.000Z
Updated: 2024-08-07T07:17:26.069Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4871 |
vulnerable | 2026-06-08 04:51:50.216750 |
Details available
SQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
Published: 2010-05-10T20:00:00.000Z
Updated: 2024-08-07T07:17:26.063Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4546 |
vulnerable | 2026-06-08 04:51:48.866783 |
Details available
globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) pb_username (aka pb%5Fusername) and (2) level cookies.
Published: 2010-01-04T17:00:00.000Z
Updated: 2024-08-07T07:08:37.974Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4545 |
vulnerable | 2026-06-08 04:51:48.866419 |
Details available
Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb.
Published: 2010-01-04T17:00:00.000Z
Updated: 2024-08-07T07:08:37.958Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.