CVE-2023-36223

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function...

bbs-go 跨站脚本漏洞

bbs-go is an open source community system built using the Go language by mlogclub open source. A cross-site scripting vulnerability exists in mlogclub bbs-go v. 3.5.5, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload on the announcemen...

bbs-go 跨站脚本漏洞

bbs-go is an open source community system built using the Go language by mlogclub open source. A cross-site scripting vulnerability exists in mlogclub bbs-go v. 3.5.5, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload on the comment...

PT-2023-25489 · Mlogclub · Bbs-Go

Name of the Vulnerable Software and Affected Versions: mlogclub bbs-go versions 3.5.5 and before Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function. This enables the attacker to perform Cross Site...

CVE-2023-36223

CVE-2023-36223 is a Cross Site Scripting (XSS) vulnerability in mlogclub/bbs-go prior to 3.5.5. The root cause is improper escaping in the announcements parameter within the settings function, allowing a remote attacker to inject and execute script code in a victim’s browser. Multiple connected s...

CVE-2023-36222

CVE-2023-36222 (mlogclub/bbs-go) is a Cross Site Scripting vulnerability affecting v3.5.5 and earlier. The issue arises in the comment parameter of the article function, where crafted input can be echoed to the front end, allowing a remote attacker to execute arbitrary code via XSS. Several conne...

WordPress BBS e-Popup Plugin <= 2.4.5 is vulnerable to Broken Access Control

Software BBS e-Popup Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36504 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 7cabb71ca4f5 Credits Abdi Pranata Required privile...

WordPress BBS e-Popup Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Software BBS e-Popup Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34174 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 96c0636c0d1f Credits LEE SE HYOUNG...

CVE-2023-27755

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

CVE-2023-27755

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

Arbitrary file deletion

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

CVE-2023-27755

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

CVE-2023-27755

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...

CVE-2023-27755

CVE-2023-27755 (go-bbs v1) is an arbitrary file download vulnerability in the /api/v1/download component. The connection between the affected code path and unauthorized file access is stated across multiple sources, with the root issue described as an arbitrary file download via the download endp...

go-bbs 代码问题漏洞

go-bbs is a switchable template BBS social blogging system based on Beego development. A security vulnerability exists in go-bbs v1, which was discovered via component/api/v1/download and contains an arbitrary file download vulnerability...

CVE-2023-27089

Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login parameter...

Cross site scripting

Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login parameter...

CVE-2023-27089

Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login parameter...

ehuacui-bbs 跨站脚本漏洞

ehuacui-bbs is ehuacui open source a bbs forum system. ehuacui-bbs has a security vulnerability that can be exploited by an attacker to cause a denial of service via a specially crafted payload in the login parameter...

CVE-2023-27089

CVE-2023-27089 affects Ehuacui BBS and is described as a Cross Site Scripting vulnerability in the login parameter that can cause denial of service. The CVSS 3.1 base score is 8.2 (High) with Network attack vector, low attack complexity, low privileges, user interaction required, scope changed, a...