CVE-2024-24156

Cross Site Scripting XSS vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wrcontent parameter...

CVE-2022-30050

Gnuboard 5.55 and 5.56 is vulnerable to Cross Site Scripting XSS via bbs/memberconfirm.php...

CVE-2022-44216

Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's original password...

CVE-2022-3963

A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fmid leads to cross site scripting. It is possible to launch the attack remotely. Upgrading ...

CVE-2012-4873

Cross-site scripting XSS vulnerability in the filedownload function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter...

CVE-2024-24157

Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting XSS via board.py...

CVE-2022-1252

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any...

CVE-2024-39097

There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the url parameter in login path...

CVE-2024-39097

There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the url parameter in login path...

CVE-2024-39097

There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the url parameter in login path...

CVE-2024-39097

There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the url parameter in login path...

CVE-2024-39097

Gnuboard v6.0.4 and earlier is affected by an Open Redirect in the login path via the url parameter. Root cause: improper validation/tainting of the login URL leads to redirection to an attacker-controlled site. Impact: user could be redirected to malicious sites (CVSS: 6.1, MEDIUM; network vecto...

PT-2024-28349

Name of the Vulnerable Software and Affected Versions Gnuboard versions 6.0.4 and below Description An Open Redirect issue exists in Gnuboard. The issue is due to a flaw in the url parameter within the login path. This allows an attacker to redirect users to a malicious website. The vulnerable...

Gnuboard 安全漏洞

Gnuboard is an open source set of extensible forum programs from Gnuboard. A security vulnerability exists in Gnuboard v6.0.4 and earlier versions, which stems from the presence of an open redirection vulnerability via the url parameter in the login path...

CVE-2024-41475

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...

PT-2024-29416 · Gnuboard · Gnuboard

Name of the Vulnerable Software and Affected Versions: Gnuboard g6 version 6.0.7 Description: The issue is related to Session hijacking due to a CORS misconfiguration. This allows for unauthorized access to user sessions. Recommendations: For Gnuboard g6 version 6.0.7, update the CORS configurati...

CVE-2024-41475

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...

CVE-2024-41475

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...

CVE-2024-41475

CVE-2024-41475 affects Gnuboard g6 6.0.7. Vulnerable due to a misconfigured CORS policy that can enable session hijacking, potentially exposing user sessions (high/critical impact per sources). Remediation: fix CORS configuration to properly restrict cross-origin access; consider restricting acce...

Gnuboard 安全漏洞

Gnuboard is a suite of extensible forum programs from the Gnuboard open source. A security vulnerability exists in Gnuboard g6 version 6.0.7, which stems from a CORS misconfiguration that makes it vulnerable to session hijacking...