CVE-2024-24157

Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting XSS via board.py...

PT-2024-20302

Name of the Vulnerable Software and Affected Versions Gnuboard g6 versions prior to the version including commit c2cc1f5069e00491ea48618d957332d90f6d40e4 Description The issue concerns a Cross Site Scripting XSS problem. It is related to the board.py file. Recommendations For Gnuboard g6 versions...

CVE-2024-24156

Cross Site Scripting XSS vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wrcontent parameter...

CVE-2024-24156

Cross Site Scripting XSS vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wrcontent parameter...

CVE-2024-24156

Cross Site Scripting XSS vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wrcontent parameter...

CVE-2024-24156

Cross Site Scripting XSS vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wrcontent parameter...

CVE-2024-24156: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wrcontent parameter...

CVE-2024-24156

A Cross Site Scripting (XSS) vulnerability exists in Gnuboard g6 versions prior to Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5 . The flaw allows remote attackers to execute arbitrary code by exploiting the wr_content parameter. This can lead to the injection of malicious scripts into t...

CVE-2024-24156

Cross Site Scripting XSS vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wrcontent parameter...

PT-2024-20301 · Gnuboard · Gnuboard

Name of the Vulnerable Software and Affected Versions: Gnuboard g6 versions before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5 Description: A Cross Site Scripting XSS issue allows remote attackers to execute arbitrary code via the wr content parameter. This enables attackers to inject...

CVE-2022-44216

Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's original password...

Design/Logic Flaw

Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's original password...

CVE-2022-44216

Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's original password...

CVE-2022-44216

Gnuboard versions 5.5.4 and 5.5.5 are reported vulnerable to an insecure permissions issue that lets an attacker change the password of all users without knowing any victim’s password. The provided documents consistently describe this vulnerability as an account-management/privilege-control flaw ...

CVE-2022-44216

Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's original password...

PT-2023-14435

Name of the Vulnerable Software and Affected Versions Gnuboard versions 5.5.4 through 5.5.5 Description The issue allows an attacker to change the password of all users without knowing the victim's original password, due to insecure permissions. Recommendations For versions 5.5.4 and 5.5.5,...

CVE-2022-44216

Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's original password...

CVE-2022-44216: Missing Authentication for Critical Function

Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's original password...

CVE-2022-44216

Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's original password...

CVE-2021-4293

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in gnuboard youngcart5 up to 5.4.5.1. Affected is an unknown function of the file adm/menulistupdate.php. The manipulation of the argument melink leads to cross site scripting. It is possible to launch the attack...