Bosdates (Bosdev) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2008-03-08. Vendor: Bosdev.

CVEs of Bosdates

• CVE-2008-1211 - CVSS 4.3 (medium), 2008-03-08: Cross-site scripting (XSS) vulnerability in BosDates 3.x and 4.x allows remote attackers to inject arbitrary web script or HTML via (1) the type parameter in…
• CVE-2006-3957 - CVSS 7.5 (high), 2006-08-01: PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath…
• CVE-2005-3911 - CVSS 7.5 (high), 2005-11-30: Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year…
• CVE-2004-0275 - CVSS 5 (medium), 2004-11-23: SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via…