Bowo System Dashboard vulnerabilities

• bowo system dashboard System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter CVE-2024-12299 6.1 MediumJanuary 30, 2025
• bowo system dashboard System Dashboard < 2.8.15 - Unauthenticated Stored XSS CVE-2024-11107 6.1 MediumDecember 10, 2024
• bowo system dashboard System Dashboard < 2.8.15 - Admin+ Path Traversal CVE-2024-10708 4.9 MediumDecember 10, 2024
• bowo system dashboard System Dashboard < 2.8.10 - XSS via Header Injection CVE-2023-7246 5.4 MediumMarch 20, 2024
• bowo system dashboard System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value) CVE-2023-5713 4.3 MediumDecember 7, 2023
• bowo system dashboard System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants) CVE-2023-5710 4.3 MediumDecember 7, 2023
• bowo system dashboard System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs) CVE-2023-5714 4.3 MediumDecember 7, 2023
• bowo system dashboard System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value) CVE-2023-5712 4.3 MediumDecember 7, 2023
• bowo system dashboard System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info) CVE-2023-5711 4.3 MediumDecember 7, 2023