Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 39

Export CSV
CVE-2020-18662

SQL Injection vulnerability in gnuboard5 <=v5.3.2.8 via the table_prefix parameter in install_db.php.

CVSS 3.1 · 9.8 Critical EPSS 5.4% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2020-18661

Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the url parameter to bbs/login.php.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-18678

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroup_form_update.php gr_1~10 parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-18676

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail contents" parameter, aka the adm/board_form_update.php bo_mobile_content_tail parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-18675

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" parameter, aka the adm/board_form_update.php bo_mobile_subject parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-18674

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-18673

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parameter, aka the adm/menu_list_update.php me_link parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-18672

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka the adm/board_form_update.php bo_content_head parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-18671

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head contents" parameter, aka the adm/board_form_update.php bo_mobile_content_head parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-18670

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/config_form_update.php cf_1~10 parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-18669

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka the adm/board_form_update.php bo_subject parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-18668

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-15585

Cross-Site Scripting (XSS) vulnerability in newwinform.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-15584

Cross-Site Scripting (XSS) vulnerability in adm/boardgroup_form_update.php and adm/boardgroup_list_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-15583

Cross-Site Scripting (XSS) vulnerability in point_list.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-15582

Cross-Site Scripting (XSS) vulnerability in adm/sms_admin/num_book_write.php and adm/sms_admin/num_book_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-15581

Cross-Site Scripting (XSS) vulnerability in adm/faqmasterformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Sir
Products
Gnuboard
CVE-2018-15580

Cross-Site Scripting (XSS) vulnerability in adm/contentformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Sir
Products
Gnuboard