633 matches found
CVE-2021-43097
The provided connected documents indicate CVE-2021-43097 affects the bbs 5.3 web application, specifically a Server-side Template Injection (SSTI) in TemplateManageAction.java that could allow a malicious user to execute arbitrary code. This establishes the component/file and the underlying vulne...
diyhi bbs 路径遍历漏洞
diyhi bbs patrol cloud light forum system is a Chinese open source project , using JAVA + MYSQL architecture , adaptive mobile and computer , simple interface , high performance . diyhi bbs 5.3 version of a security vulnerability , the vulnerability stems from the UpgradeManageAction.java file...
diyhi bbs 代码问题漏洞
diyhi bbs patrol cloud light forum system is a Chinese open source project , using JAVA + MYSQL architecture , adaptive mobile and computer , simple interface , high performance . A security vulnerability exists in diyhi bbs version 5.3, which originates from a file upload vulnerability in the...
diyhi bbs 代码注入漏洞
diyhi bbs patrol cloud light forum system is a Chinese open source project , using JAVA + MYSQL architecture , adaptive mobile and computer , simple interface , high performance . diyhi bbs 5.3 version of the code injection vulnerability , the vulnerability stems from TemplateManageAction.javawhi...
CVE-2022-23390
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...
CVE-2022-23390
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...
Design/Logic Flaw
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...
CVE-2022-23390
CVE-2022-23390 affects BBS Forum, where the vulnerability is in the getType function. Reports indicate that versions 5.3 and earlier are susceptible to arbitrary file uploads due to improper checks in the file handling logic. Affected product: BBS Forum (v5.3 and earlier). Impact: potential arbit...
CVE-2022-23390
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...
CVE-2022-23390
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...
bbs.2ccc.com Cross Site Scripting vulnerability OBB-2284014
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-36512
An issue was discovered in function scanallsubs in src/sbbs3/scansubs.cpp in Synchronet BBS, which may allow attackers to view sensitive information due to an uninitialized value...
CVE-2021-36512
The CVE-2021-36512 issue affects Synchronet BBS (src/sbbs3/scansubs.cpp: function scanallsubs). An uninitialized value may allow an attacker to view sensitive information. Affected component is the scanallsubs routine within Synchronet BBS, but the provided documents do not specify exact vulnerab...
CVE-2021-36512
An issue was discovered in function scanallsubs in src/sbbs3/scansubs.cpp in Synchronet BBS, which may allow attackers to view sensitive information due to an uninitialized value...
Xiuno BBS Access Control Error Vulnerability
Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from an Access Control Error vulnerability that stems from the product routeuser.php that allows retrieval of usernames. No details of the vulnerability are provided at this time...
Xiuno BBS Cross-Site Scripting Vulnerability
Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from a cross-site scripting vulnerability that originates from the failure of the product/admin/?setting-base.htm page to properly handle data in the sitebrief field. An attacker can exploit this vulnerability to...
Xiuno BBS Cross-Site Scripting Vulnerability (CNVD-2021-85273)
Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from a cross-site scripting vulnerability that originates from the failure of the product/admin/?setting-base.htm page to properly handle data in the sitename field. An attacker can execute client-side code via th...
Xiuno BBS Cross-Site Scripting Vulnerability (CNVD-2021-85272)
Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from a cross-site scripting vulnerability that stems from the product's installinstall.sql component failing to properly validate user input data. An attacker can execute arbitrary web script and HTML by modifying...