630 matches found
CVE-2024-28126
CVE-2024-28126 : A cross-site scripting (CWE-79) vulnerability exists in 0ch BBS Script ver.4.00. The flaw allows an arbitrary script to run in a user’s browser when visiting sites using the product. The developer is unreachable, and multiple sources recommend stopping use of 0ch BBS Script ver.4...
0ch BBS Script (0ch) vulnerable to cross-site scripting
Overview 0ch BBS Script 0ch according to the original report submitted by the reporter provided by Zerochannel according to the original report submitted by the reporter is bulletin board software. 0ch BBS Script 0ch contains a cross-site scripting vulnerability CWE-79. During the meeting of...
PT-2024-22278 · Unknown · 0Ch Bbs Script
Name of the Vulnerable Software and Affected Versions: 0ch BBS Script version 4.00 Description: A cross-site scripting vulnerability exists in the product, allowing an arbitrary script to be executed on the web browser of the user accessing the website that uses the product. The developer was...
Flash CGI Mini Thread 跨站脚本漏洞
Flash CGI Mini Thread is a CGI script for creating bulletin board systems BBS from Flash CGI, Inc. A cross-site scripting vulnerability exists in Flash CGI Mini Thread version 3.33, which originates from a vulnerability that could allow an attacker to execute arbitrary script on the web browser o...
Zerochannel 0ch BBS Script 安全漏洞
Zerochannel 0ch BBS Script is a bulletin board software from Zerochannel, Inc. A security vulnerability exists in Zerochannel 0ch BBS Script version ver.4.00, which originated from a vulnerability that allows an attacker to execute arbitrary scripts on the web browser of a user who visits a web...
JVN#46874970: 0ch BBS Script (0ch) vulnerable to cross-site scripting
0ch BBS Script 0ch according to the original report submitted by the reporter provided by Zerochannel according to the original report submitted by the reporter is bulletin board software. 0ch BBS Script 0ch contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be...
bbs.18wos.org Cross Site Scripting vulnerability OBB-3855498
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2024-14331 · Relic · Relic-Toolkit
Name of the Vulnerable Software and Affected Versions: Relic relic-toolkit version 0.6.0 Description: An issue in the cp bbs sig function allows a remote attacker to obtain sensitive information and escalate privileges. The issue is located in the relic/src/cp/relic cp bbs.c file of the Relic...
GHSA-V9WR-2XRG-V7W8 Cross-site Scripting in beetl-bbs
Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...
Cross-site Scripting in beetl-bbs
Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...
CVE-2024-22490
Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...
Cross site scripting
Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...
CVE-2024-22490
Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...
CVE-2024-22490
CVE-2024-22490 affects beetl-bbs 2.0. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the /index endpoint using the keyword parameter, allowing arbitrary code execution according to the description. The connected documents confirm the affected product and the input vector b...
PT-2024-19447 · Beetl-Bbs · Beetl-Bbs
Name of the Vulnerable Software and Affected Versions: beetl-bbs version 2.0 Description: The issue is related to a Cross Site Scripting XSS flaw that allows attackers to execute arbitrary code. This is achieved by exploiting the keyword parameter in the "/index" API endpoint. Recommendations: Fo...
CVE-2024-22490
Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...
GHSA-32Q4-86G8-6637 Stored Cross Site Scripting in beetl-bbs
A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...
Stored Cross Site Scripting in beetl-bbs
A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...