Lucene search
+L

5 matches found

NVD
NVD
•added 2019/10/30 6:15 p.m.•26 views

CVE-2018-18678

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroupformupdate.php gr110 parameter...

6.1CVSS6AI score0.0113EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/10/30 5:58 p.m.•38 views

CVE-2018-18678

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroupformupdate.php gr110 parameter...

6AI score0.0113EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/30 12:00 a.m.•2 views

CVE-2018-18678: Improper Neutralization of Input During Web Page Generation

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroupformupdate.php gr110 parameter...

6.1CVSS6.5AI score0.0113EPSS
SaveExploits0References2
Prion
Prion
•added 2019/04/26 8:29 p.m.•21 views

Cross site scripting

Cross-Site Scripting XSS vulnerability in adm/boardgroupformupdate.php and adm/boardgrouplistupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...

4.3CVSS6AI score0.01067EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/26 12:00 a.m.•4 views

CVE-2018-15584: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in adm/boardgroupformupdate.php and adm/boardgrouplistupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS6AI score0.01067EPSS
SaveExploits0References2
Rows per page
Query Builder