Boonex

14 CVEs across 5 Boonex products. Browse Boonex vulnerabilities, severities, and proof-of-concept exploits.

Boonex products with known CVEs

ProductCVEs
Dolphin9
Orca2
Barracuda1
Barracuda Directory1
Ray1
Boonex CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-27969Medium4.82021-03-23Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter.
CVE-2013-3638High8.82020-02-06SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'c…
CVE-2014-43332014-06-19Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authenticatio…
CVE-2014-38102014-06-19SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators to execute arbitrary…
CVE-2012-08732012-02-23Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) ex…
CVE-2011-37282011-09-23Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error mess…
CVE-2009-29192009-08-21Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic ti…
CVE-2008-51672008-11-19PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to…
CVE-2008-31672008-07-14Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP c…
CVE-2008-31662008-07-14PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to e…
CVE-2006-54102006-10-20PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via…
CVE-2006-41892006-08-17Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (…
CVE-2006-21332006-05-01SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) link_dir_tar…
CVE-2006-08332006-02-22Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified ve…