630 matches found
Cross site scripting
A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...
Design/Logic Flaw
An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames...
Cross site scripting
A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...
Cross site scripting
A cross-site scripting XSS vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0...
CVE-2020-21496
CVE-2020-21496 describes an XSS vulnerability in Xiuno BBS 4.0.4 affecting the /admin/?setting-base.htm page via the sitebrief parameter. The underlying issue is improper handling of data in sitebrief, enabling arbitrary client-side script execution. Documents do not provide details on exploit st...
CVE-2020-21496
A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...
CVE-2020-21494
A cross-site scripting XSS vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0...
CVE-2020-21494
This CVE concerns Xiuno BBS 4.0.4 where an XSS vulnerability exists in the install/install.sql component. The underlying issue is that attacker-controlled input can alter the doctype value to 0, enabling execution of arbitrary web scripts or HTML. The affected artifact is the install.sql routine ...
CVE-2020-21495
A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...
CVE-2020-21495
CVE-2020-21495 is an XSS vulnerability in Xiuno BBS 4.0.4 affecting the /admin/?setting-base.htm page, caused by inadequate handling of the sitename parameter. The vulnerability allows an attacker to inject and execute arbitrary web scripts/HTML in the context of the affected site. The provided c...
CVE-2020-21493
An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames...
CVE-2020-21493
CVE-2020-21493 : Xiuno BBS 4.0.4 has an Access Control Error in the component route\user.php that enables attackers to enumerate usernames. Documented across multiple sources (Red Hat, CNVD, NVD, etc.). No remediation details are provided in the supplied materials; affected version is explicitly ...
Xiuno BBS 跨站脚本漏洞
Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from a cross-site scripting vulnerability that originates from the failure of the product/admin/?setting-base.htm page to properly handle data in the sitename field. An attacker can execute client-side code via th...
Xiuno BBS 跨站脚本漏洞
Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from a cross-site scripting vulnerability that originates from the failure of the product/admin/?setting-base.htm page to properly handle data in the sitebrief field. An attacker can exploit this vulnerability to...
Xiuno BBS 跨站脚本漏洞
Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from a cross-site scripting vulnerability that stems from the product's installinstall.sql component failing to properly validate user input data. An attacker can execute arbitrary web script and HTML by modifying...
gnuboard5 跨站脚本漏洞
GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 5.3.2.8 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the act parameter in bbs/moveupdate.php...
BBS forums suffer from SQL injection vulnerability
BBS Forum is a web application. BBS Forum has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...
Kuicms PHP EE 2.0 Cross Site Scripting
Exploit Title: Kuicms Php EE 2.0 - Persistent Cross-Site Scripting Date: 2020-05-27 Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd. Vendor Homepage: https://kuicms.com Software Link: https://kuicms.com/kuicms.zip Version: Kuicms Php EE 2.0 Tested on: Windows...
Malicious Package
Overview bbs-uploader is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using bbs-uploader...
