CVE-2008-2492: Badongo Campus Bulletin Board

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to post3/view.asp and the (2) review parameter to post3/book.asp.

Affected products

• Badongo Campus Bulletin Board: version 3.4 only

Published 2008-05-28. Last modified 2026-06-16.