Lucene search
+L

630 matches found

CVE
CVE
added 2023/03/06 3:49 p.m.47 views

CVE-2023-1200

CVE-2023-1200 concerns the open-source ehuacui BBS where the vulnerability arises from improper handling of the username parameter, allowing cross-site scripting. The issue is described as remote in nature, with exploits publicly disclosed. The available connected documents confirm the affected s...

5.4CVSS4.4AI score0.00564EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/06 12:0 a.m.4 views

PT-2023-16815 · Unknown · Ehuacui Bbs

Name of the Vulnerable Software and Affected Versions: ehuacui bbs affected versions not specified Description: A vulnerability was found in ehuacui bbs, which has been declared as problematic. The manipulation of the username argument leads to cross-site scripting. The attack can be initiated...

5.4CVSS6.5AI score0.00564EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/03/06 12:0 a.m.6 views

ehuacui-bbs 跨站脚本漏洞

ehuacui-bbs is an open source bbs forum system by ehuacui. A cross-site scripting vulnerability exists in ehuacui-bbs, which stems from cross-site scripting due to incorrect manipulation of the username parameter...

5.4CVSS4.6AI score0.00564EPSS
SaveExploits1References4
NVD
NVD
added 2022/12/08 8:15 a.m.19 views

CVE-2022-4347

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

5.4CVSS0.0039EPSS
SaveExploits1References2
Prion
Prion
added 2022/12/08 8:15 a.m.16 views

Cross site scripting

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

4.9CVSS5.3AI score0.0039EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/12/08 12:0 a.m.8 views

CVE-2022-4347 xiandafu beetl-bbs WebUtils.java cross site scripting

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

3.5CVSS5.5AI score0.0039EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.14 views

PT-2022-26931 · Unknown · Xiandafu Beetl-Bbs

Name of the Vulnerable Software and Affected Versions: xiandafu beetl-bbs affected versions not specified Description: A vulnerability was found in xiandafu beetl-bbs, affecting an unknown functionality of the file WebUtils.java. The manipulation of the user argument leads to cross-site scripting...

5.4CVSS5.1AI score0.0039EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/12/08 12:0 a.m.4 views

beetl-bbs 安全漏洞

beetl-bbs is a forum system by xiandafu individual developers. A security vulnerability exists in beetl-bbs due to cross-site scripting resulting from the manipulation of the user parameter by an unknown function in its WebUtils.java file. The attack method is publicly available and can be...

5.4CVSS5.2AI score0.0039EPSS
SaveExploits1References3
CVE
CVE
added 2022/12/08 12:0 a.m.55 views

CVE-2022-4347

The CVE-2022-4347 entry concerns xiandafu beetl-bbs WebUtils.java and a cross-site scripting vulnerability. The known issue is that manipulating the user argument can trigger XSS, with remote exploitation and a publicly disclosed exploit. The connected documents provide no product version ranges ...

5.4CVSS4.4AI score0.0039EPSS
SaveExploits1References2Affected Software1
Openbugbounty
Openbugbounty
added 2022/11/09 7:38 p.m.10 views

bbs-redaktion.com Cross Site Scripting vulnerability OBB-3046558

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
added 2022/09/07 12:0 a.m.7 views

Xiuno BBS 跨站脚本漏洞

Xiuno BBS is an open source forum program based on PHP and MySQL. A security vulnerability exists in Xiuno BBS version 4.0.4, which can be exploited by remote attackers to execute arbitrary web script or HTML via the attachment upload function...

6.1CVSS6.8AI score0.00615EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/06/08 12:0 a.m.57 views

bbs-go cross-site scripting vulnerability

bbs-go is an open source community system built using the Go language. bbs-go 3.3.0 and earlier versions have a cross-site scripting vulnerability that stems from the lack of filtering and escaping of user data in the v-html tag of vue used by the application. An attacker could use this...

3.5CVSS2.5AI score0.00511EPSS
SaveExploits1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/02 6:15 p.m.3 views

CVE-2021-38221

bbs-go = 3.3.0 including Custom Edition is vulnerable to stored XSS...

5.4CVSS6.2AI score0.00511EPSS
SaveExploits1References3
NVD
NVD
added 2022/06/02 6:15 p.m.23 views

CVE-2021-38221

bbs-go = 3.3.0 including Custom Edition is vulnerable to stored XSS...

5.4CVSS0.00511EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/02 6:15 p.m.22 views

Cross site scripting

bbs-go = 3.3.0 including Custom Edition is vulnerable to stored XSS...

3.5CVSS5.5AI score0.00511EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/06/02 5:27 p.m.84 views

CVE-2021-38221

CVE-2021-38221 affects bbs-go (including Custom Edition)

5.4CVSS5.4AI score0.00511EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/06/02 5:27 p.m.28 views

CVE-2021-38221

bbs-go = 3.3.0 including Custom Edition is vulnerable to stored XSS...

5.7AI score0.00511EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.8 views

bbs-go 跨站脚本漏洞

bbs-go is an open source community system built using the Go language. bbs-go 3.3.0 and earlier versions have a cross-site scripting vulnerability that stems from the lack of filtering and escaping of user data in the v-html tag of vue used by the application. An attacker could use this...

5.4CVSS5.3AI score0.00511EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/16 5:15 p.m.3 views

CVE-2022-30050

Gnuboard 5.55 and 5.56 is vulnerable to Cross Site Scripting XSS via bbs/memberconfirm.php...

6.1CVSS5.9AI score0.00685EPSS
SaveExploits1References2
NVD
NVD
added 2022/03/31 8:15 a.m.19 views

CVE-2022-27496

Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.1CVSS0.00719EPSS
SaveExploits0References2
Rows per page
Query Builder