logoshows records
4 published records for vendor logoshows.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-20 Improper Input Validation1
- CWE-264 Permissions, Privileges, and Access Controls1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2009-4546Proof of concept | globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative access by setting thelogoshows · logoshows bbs · CWE-20 | High7.5 | — | 2.6% | Jan 4, 2010 |
30Monitor | CVE-2009-4871Proof of concept | SQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via tlogoshows · logoshows bbs · CWE-89 | High7.5 | — | 1.0% | May 11, 2010 |
30Monitor | CVE-2009-4872Proof of concept | Multiple SQL injection vulnerabilities in globepersonnel_login.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commlogoshows · logoshows bbs · CWE-89 | High7.5 | — | 0.9% | May 11, 2010 |
21Monitor | CVE-2009-4545Proof of concept | Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloalogoshows · logoshows bbs · CWE-264 | Medium5.0 | — | 2.2% | Jan 4, 2010 |
- CVE-2009-454631Monitor
globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the
HighCVSS 7.5Proof of conceptEPSS 3%logoshows · logoshows bbsJan 4, 2010
- CVE-2009-487130Monitor
SQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via t
HighCVSS 7.5Proof of conceptEPSS 1%logoshows · logoshows bbsMay 11, 2010
- CVE-2009-487230Monitor
Multiple SQL injection vulnerabilities in globepersonnel_login.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL comm
HighCVSS 7.5Proof of conceptEPSS 1%logoshows · logoshows bbsMay 11, 2010
- CVE-2009-454521Monitor
Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloa
MediumCVSS 5.0Proof of conceptEPSS 2%logoshows · logoshows bbsJan 4, 2010