Lucene search
K

7 matches found

NVD
NVD
added 2023/07/03 9:15 p.m.6 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

5.4CVSS5.8AI score0.00274EPSS
Exploits1References3
OSV
OSV
added 2023/07/03 9:15 p.m.11 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

5.4CVSS7.4AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/07/03 12:0 a.m.8 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

7.5AI score0.00274EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/07/03 12:0 a.m.2 views

PT-2023-25489 · Mlogclub · Bbs-Go

Name of the Vulnerable Software and Affected Versions: mlogclub bbs-go versions 3.5.5 and before Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function. This enables the attacker to perform Cross Site...

5.4CVSS5.7AI score0.00274EPSS
Exploits1References6
Cvelist
Cvelist
added 2023/07/03 12:0 a.m.10 views

CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

6AI score0.00274EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/07/03 12:0 a.m.2 views

bbs-go 跨站脚本漏洞

bbs-go is an open source community system built using the Go language by mlogclub open source. A cross-site scripting vulnerability exists in mlogclub bbs-go v. 3.5.5, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload on the announcemen...

5.4CVSS6AI score0.00274EPSS
Exploits1References5
OSV
OSV
added 2023/05/09 4:15 p.m.9 views

CVE-2023-31799

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the system annnouncements parameter...

4.8CVSS7.2AI score
Exploits0References2
Rows per page
Query Builder