Lucene search
+L

9 matches found

NVD
NVD
•added 2023/07/03 9:15 p.m.•36 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

5.4CVSS5.8AI score0.0056EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/07/03 12:00 a.m.•23 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

7.4AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2023/07/03 12:00 a.m.•61 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

6AI score0.0056EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/07/03 12:00 a.m.•14 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

7.5AI score0.0056EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/07/03 12:00 a.m.•25 views

bbs-go Cross-Site Scripting Vulnerability

bbs-go is an open source community system built using the Go language by mlogclub open source. A cross-site scripting vulnerability exists in mlogclub bbs-go v. 3.5.5, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload on the announcemen...

5.4CVSS6AI score0.0056EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/07/03 12:00 a.m.•22 views

PT-2023-25489 · Mlogclub · Bbs-Go

Name of the Vulnerable Software and Affected Versions: mlogclub bbs-go versions 3.5.5 and before Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function. This enables the attacker to perform Cross Site...

5.4CVSS5.7AI score0.0056EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/03 12:00 a.m.•14 views

CVE-2023-36223: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

5.4CVSS6.6AI score0.0056EPSS
SaveExploits1References4
Mend
Mend
•added 2023/07/03 12:00 a.m.•11 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

5.4CVSS0.0056EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2023/05/09 12:00 a.m.•27 views

CVE-2023-31799

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the system annnouncements parameter...

4.8CVSS7.2AI score0.00417EPSS
SaveExploits0References3
Rows per page
Query Builder