633 matches found
BBS forums suffer from SQL injection vulnerability
BBS Forum is a web application. BBS Forum has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...
Kuicms PHP EE 2.0 Cross Site Scripting
Exploit Title: Kuicms Php EE 2.0 - Persistent Cross-Site Scripting Date: 2020-05-27 Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd. Vendor Homepage: https://kuicms.com Software Link: https://kuicms.com/kuicms.zip Version: Kuicms Php EE 2.0 Tested on: Windows...
Malicious Package
Overview bbs-uploader is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using bbs-uploader...
CVE-2017-6371
Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service service crash via a long string in the HTTP Referer header...
CVE-2017-6371
Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service service crash via a long string in the HTTP Referer header...
Design/Logic Flaw
Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service service crash via a long string in the HTTP Referer header...
CVE-2017-6371
Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service service crash via a long string in the HTTP Referer header...
CVE-2017-6371
CVE-2017-6371 affects Synchronet BBS 3.16c for Windows. The issue is a denial-of-service caused by processing a long string in the HTTP Referer header, leading to a service crash. Public references (Exploit-DB, PacketStorm, and related entries) document a DoS exposure and show exploit examples de...
CVE-2019-19998
Xiuno BBS 4.0 allows XXE via plugin/xnwechatpublic/route/token.php...
CVE-2019-19998
Xiuno BBS 4.0 allows XXE via plugin/xnwechatpublic/route/token.php...
Sql injection
Xiuno BBS 4.0 allows XXE via plugin/xnwechatpublic/route/token.php...
CVE-2019-19998
CVE-2019-19998 affects Xiuno BBS 4.0. The vulnerability is an XXE in the file path plugin/xn_wechat_public/route/token.php, enabling potential external entity processing. Public sources list CVSSv2 base 5.0 (Network, Low attack complexity, No authentication, Partial confidentiality impact) and CV...
CVE-2019-19998
Xiuno BBS 4.0 allows XXE via plugin/xnwechatpublic/route/token.php...
Xiuno BBS code issue vulnerability
Xiuno BBS is an open source forum program based on PHP and MySQL. A code issue vulnerability exists in Xiuno BBS version 4.0. The vulnerability stems from an improperly designed or implemented problem in the code development process of a web system or product. No detailed vulnerability details ar...
bbs-bbin.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1005953 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting bbs-bbin.com website and i...
Xiuno BBS system is vulnerable to system reinstallation.
Xiuno BBS is an open source lightweight forum system. Xiuno BBS system suffers from a system reinstallation vulnerability. The vulnerability stems from the fact that the installation directory is not protected or filtered after the system is installed, and an attacker can reinstall the system...
Xiuno BBS 4.0.4 is vulnerable to system reinstallation.
Xiuno BBS is an open source lightweight forum system. Xiuno BBS 4.0.4 suffers from a system reinstallation vulnerability. The vulnerability stems from the system not handling related files after installation, resulting in an infinite reinstallation of the system...
CVE-2018-15559
The editor in Xiuno BBS 4.0.4 allows stored XSS...