Lucene search
+L

9 matches found

NVD
NVD
•added 2023/07/03 9:15 p.m.•29 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

5.4CVSS5.8AI score0.0056EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/07/03 12:00 a.m.•14 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

7.5AI score0.0056EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/07/03 12:00 a.m.•53 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

6AI score0.0056EPSS
SaveExploits1References2
Mend
Mend
•added 2023/07/03 12:00 a.m.•2 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

5.4CVSS0.0056EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/07/03 12:00 a.m.•20 views

bbs-go 跨站脚本漏洞

bbs-go is an open source community system built using the Go language by mlogclub open source. A cross-site scripting vulnerability exists in mlogclub bbs-go v. 3.5.5, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload on the announcemen...

5.4CVSS6AI score0.0056EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/03 12:00 a.m.•7 views

CVE-2023-36223: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

5.4CVSS6.6AI score0.0056EPSS
SaveExploits1References4
OSV
OSV
•added 2023/07/03 12:00 a.m.•21 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

7.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/07/03 12:00 a.m.•16 views

PT-2023-25489 · Mlogclub · Bbs-Go

Name of the Vulnerable Software and Affected Versions: mlogclub bbs-go versions 3.5.5 and before Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function. This enables the attacker to perform Cross Site...

5.4CVSS5.7AI score0.0056EPSS
SaveExploits1References6
OSV
OSV
•added 2023/05/09 12:00 a.m.•18 views

CVE-2023-31799

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the system annnouncements parameter...

4.8CVSS7.2AI score
SaveExploits0References3
Rows per page
Query Builder