CVE-2024-41475

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...

EUVD-2025-21881

Malicious code in bioql PyPI...

CVE-2025-7786 Gnuboard g6 Post Reply qa cross site scripting

A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrappopinupdate/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated...

CVE-2025-7786 Gnuboard g6 Post Reply qa cross site scripting

A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrappopinupdate/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated...

CVE-2025-7786

CVE-2025-7786 affects Gnuboard g6 up to version 6.0.10. The issue is a cross-site scripting vulnerability in the Post Reply Handler, triggered by processing the file path /bbs/scrap_popin_update/qa/. The attack can be carried out remotely and the exploit has been disclosed publicly. Connected sou...

CVE-2025-7786 Gnuboard g6 Post Reply qa cross site scripting

A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrappopinupdate/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated...

PT-2025-30039 · Unknown · Gnuboard G6

Name of the Vulnerable Software and Affected Versions: Gnuboard g6 versions up to 6.0.10 Description: A problematic issue has been identified in Gnuboard g6. The issue affects processing of the /bbs/scrap popin update/qa/ file within the Post Reply Handler component, leading to cross site...

CVE-2025-7786: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrappopinupdate/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated...

CVE-2024-24156

Cross Site Scripting XSS vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wrcontent parameter...

CVE-2024-24157

Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting XSS via board.py...

CVE-2024-41475

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...

CVE-2024-41475

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...

CVE-2024-41475

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...

CVE-2024-41475

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...

CVE-2024-41475

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...

CVE-2024-24157

Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting XSS via board.py...

CVE-2024-24157

Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting XSS via board.py...

CVE-2024-24157

Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting XSS via board.py...

CVE-2024-24157

Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting XSS via board.py...

CVE-2024-24157

The Gnuboard g6 content management system is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the board.py file. The flaw is specifically associated with versions prior to the commit c2cc1f5069e00491ea48618d957332d90f6d40e4 . Impacted users should update to a version that includes this...