Lucene search
+L

154 matches found

Positive Technologies
Positive Technologies
added 2025/08/05 12:00 a.m.20 views

PT-2025-31920 · Unknown · Atjiu Pybbs

Name of the Vulnerable Software and Affected Versions: atjiu pybbs versions prior to 6.0.1 Description: A problematic issue exists in atjiu pybbs. The manipulation of the word argument in the /admin/sensitive word/list file leads to cross site scripting. The attack can be initiated remotely. The...

4.8CVSS3.5AI score0.00255EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2025/08/05 12:00 a.m.14 views

PT-2025-31903 · Unknown · Atjiu Pybbs

Name of the Vulnerable Software and Affected Versions: atjiu pybbs versions up to 6.0.0 Description: A problematic issue exists in the Verification Code Handler component’s adminlogin/login function, leading to guessable captcha. This allows for remote exploitation. The exploit has been publicly...

6.9CVSS5.4AI score0.00454EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/08/05 12:00 a.m.7 views

pybbs 代码注入漏洞

pybbs is a community platform for Java development by iuiu individual developers. A code injection vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from improper handling of the parameter Username in the file /admin/topic/list, which could lead to a cross-site scripting attac...

5.4CVSS4AI score0.00625EPSS
SaveExploits3References8
Positive Technologies
Positive Technologies
added 2025/08/05 12:00 a.m.14 views

PT-2025-31911 · Unknown · Atjiu Pybbs

Name of the Vulnerable Software and Affected Versions: atjiu pybbs versions prior to 6.0.0 Description: A vulnerability exists in atjiu pybbs up to version 6.0.0, affecting an unknown functionality within the /admin/topic/list file. Manipulation of the username parameter can lead to cross site...

4.8CVSS3.5AI score0.00625EPSS
SaveExploits3References13
RedhatCVE
RedhatCVE
added 2025/05/22 11:54 p.m.11 views

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

6.1CVSS5.7AI score0.00621EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/16 12:00 a.m.62 views

Pybbs Cross-Site Scripting Vulnerability

Pybbs is a community forum for more practical Java development. A cross-site scripting vulnerability exists in Pybbs, which stems from the product's search box not effectively handling special characters in user input data. An attacker can exploit this vulnerability to execute client-side code...

6.1CVSS6AI score0.00621EPSS
SaveExploits1References1
NVD
NVD
added 2022/02/14 9:15 p.m.24 views

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

6.1CVSS0.00621EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/14 9:15 p.m.10 views

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

6.1CVSS6.5AI score0.00621EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/14 9:15 p.m.25 views

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

6.1CVSS5.7AI score
SaveExploits0References1
Prion
Prion
added 2022/02/14 9:15 p.m.16 views

Cross site scripting

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

4.3CVSS5.9AI score0.00621EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/02/14 8:48 p.m.100 views

CVE-2022-23391

CVE-2022-23391 concerns a cross-site scripting (XSS) vulnerability in Pybbs v6.0. The issue arises from the product’s search box not properly handling/sanitizing user input, allowing an attacker to inject and execute arbitrary web scripts or HTML in the victim’s browser. Documents consistently de...

6.1CVSS5.8AI score0.00621EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/02/14 8:48 p.m.38 views

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

6AI score0.00621EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/02/14 12:00 a.m.9 views

Pybbs 跨站脚本漏洞

Pybbs is a community forum for more practical Java development. A cross-site scripting vulnerability exists in Pybbs, which stems from the product's search box not effectively handling special characters in user input data. An attacker can exploit this vulnerability to execute client-side code...

6.1CVSS5.4AI score0.00621EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/05/11 12:00 a.m.4 views

XSS vulnerability in pybbs

pybbs is a practical Java development community forum system . An XSS vulnerability exists in pybbs. An attacker can exploit this vulnerability to obtain sensitive information such as user cookies...

5.8AI score
SaveExploits0
Rows per page
Query Builder