CVE-2017-6371

Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service service crash via a long string in the HTTP Referer header...

Design/Logic Flaw

Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service service crash via a long string in the HTTP Referer header...

CVE-2017-6371

Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service service crash via a long string in the HTTP Referer header...

CVE-2017-6371

CVE-2017-6371 affects Synchronet BBS 3.16c for Windows. The issue is a denial-of-service caused by processing a long string in the HTTP Referer header, leading to a service crash. Public references (Exploit-DB, PacketStorm, and related entries) document a DoS exposure and show exploit examples de...

CVE-2019-19998

Xiuno BBS 4.0 allows XXE via plugin/xnwechatpublic/route/token.php...

CVE-2019-19998

Xiuno BBS 4.0 allows XXE via plugin/xnwechatpublic/route/token.php...

Sql injection

Xiuno BBS 4.0 allows XXE via plugin/xnwechatpublic/route/token.php...

CVE-2019-19998

Xiuno BBS 4.0 allows XXE via plugin/xnwechatpublic/route/token.php...

CVE-2019-19998

CVE-2019-19998 affects Xiuno BBS 4.0. The vulnerability is an XXE in the file path plugin/xn_wechat_public/route/token.php, enabling potential external entity processing. Public sources list CVSSv2 base 5.0 (Network, Low attack complexity, No authentication, Partial confidentiality impact) and CV...

Xiuno BBS code issue vulnerability

Xiuno BBS is an open source forum program based on PHP and MySQL. A code issue vulnerability exists in Xiuno BBS version 4.0. The vulnerability stems from an improperly designed or implemented problem in the code development process of a web system or product. No detailed vulnerability details ar...

@jamesbliss/react-flickity (>=1.0.0 <=1.4.0), @jamesbliss/react-spy (=0.0.1) +21 more potentially affected by CVE-2019-10773 via yarn (>=1.0.2 <=1.21.0)

yarn NPM version =1.0.2, =1.0.0, =1.9.9, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.1, =0.0.0-semantic-release, =1.5.9, =1.1.2, =1.13.1 and more Source cves: CVE-2019-10773 Source advisory: SNYK:JS-YARN-537806...

bbs-bbin.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1005953 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting bbs-bbin.com website and i...

Xiuno BBS system is vulnerable to system reinstallation.

Xiuno BBS is an open source lightweight forum system. Xiuno BBS system suffers from a system reinstallation vulnerability. The vulnerability stems from the fact that the installation directory is not protected or filtered after the system is installed, and an attacker can reinstall the system...

Xiuno BBS 4.0.4 is vulnerable to system reinstallation.

Xiuno BBS is an open source lightweight forum system. Xiuno BBS 4.0.4 suffers from a system reinstallation vulnerability. The vulnerability stems from the system not handling related files after installation, resulting in an infinite reinstallation of the system...

Cross site scripting

The editor in Xiuno BBS 4.0.4 allows stored XSS...

CVE-2018-15559

The editor in Xiuno BBS 4.0.4 allows stored XSS...

CVE-2018-15559

The editor in Xiuno BBS 4.0.4 allows stored XSS...

CVE-2018-15559

The editor in Xiuno BBS 4.0.4 allows stored XSS...

CVE-2018-15559

Xiuno BBS 4.0.4 contains a stored XSS vulnerability in its editor. Multiple sources (NVD/CNVD) confirm the flaw and, per CNVD-2018-16946, a remote attacker could exploit it via a published post to steal administrator cookies. No remediation details are provided in the supplied documents.

Xiuno BBS Cross-Site Scripting Vulnerability (CNVD-2018-16946)

Xiuno BBS is an open source lightweight forum system. A cross-site scripting vulnerability exists in the editor in Xiuno BBS version 4.0.4. A remote attacker can exploit this vulnerability to steal administrator cookies with the help of a published post...