Skip to content
Noroxi

boka records

4 published records for vendor boka.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    4 records
    • CVE-2008-7267
      30Monitor

      SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id para

      HighCVSS 7.5Proof of conceptEPSS 1%

      boka · siteengineDec 1, 2010

    • CVE-2010-4357
      30Monitor

      SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module param

      HighCVSS 7.5Proof of conceptEPSS 0%

      boka · siteengineDec 1, 2010

    • CVE-2008-7269
      25Monitor

      Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and

      MediumCVSS 5.8Proof of conceptEPSS 8%

      boka · siteengineDec 1, 2010

    • CVE-2008-7268
      20Monitor

      The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in m

      MediumCVSS 5.0No exploitEPSS 1%

      boka · siteengineDec 1, 2010