Boonex
12 CVEs across 5 Boonex products. Browse Boonex vulnerabilities, severities, and proof-of-concept exploits.
Boonex products with known CVEs
Boonex CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2021-27969 | Medium | 4.8 | 2021-03-23 | Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter. |
CVE-2013-3638 | High | 8.8 | 2020-02-06 | SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'c… |
CVE-2014-4333 | | | 2014-06-19 | Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authenticatio… |
CVE-2014-3810 | | | 2014-06-19 | SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators to execute arbitrary… |
CVE-2012-0873 | | | 2012-02-23 | Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) ex… |
CVE-2011-3728 | | | 2011-09-23 | Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error mess… |
CVE-2009-2919 | | | 2009-08-21 | Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic ti… |
CVE-2008-5167 | | | 2008-11-19 | PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to… |
CVE-2008-3167 | | | 2008-07-14 | Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP c… |
CVE-2008-3166 | | | 2008-07-14 | PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to e… |
CVE-2006-5410 | | | 2006-10-20 | PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via… |
CVE-2006-4189 | | | 2006-08-17 | Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (… |
CVE-2006-2133 | | | 2006-05-01 | SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) link_dir_tar… |
CVE-2006-0833 | | | 2006-02-22 | Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified ve… |