3 matches found
CVE-2018-18675
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" parameter, aka the adm/boardformupdate.php bomobilesubject parameter...
6.1CVSS6AI score0.01521EPSS
SaveExploits0References3
Hardcoded credentials
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" parameter, aka the adm/boardformupdate.php bomobilesubject parameter...
4.3CVSS6AI score0.01521EPSS
SaveExploits0References3Affected Software1
CVE-2018-18675: Improper Neutralization of Input During Web Page Generation
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" parameter, aka the adm/boardformupdate.php bomobilesubject parameter...
6.1CVSS5.9AI score0.01521EPSS
SaveExploits0References2
20