CVE-2018-18668

GNUBOARD5 before 5.3.2.0 is affected by a cross-site scripting (XSS) vulnerability in the homepage title parameter (adm/config_form_update.php cf_title). Exploitation allows remote attackers to inject arbitrary web script/HTML, potentially compromising user sessions and browser execution context....

CVE-2024-24157

Gnuboard g6 is affected by CVE-2024-24157 due to a Cross Site Scripting (XSS) flaw in board.py stemming from commit c2cc1f5069e00491ea48618d957332d90f6d40e4. The vulnerability is described consistently across sources (NVD, Red Hat, OSV, CVE List, CVE.org, CNVD, VulnEnrichment, PT Security). Explo...

CVE-2024-24156

CVE-2024-24156: Cross Site Scripting (XSS) in Gnuboard g6 prior to commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5 allows remote attackers to execute arbitrary code via the wr_content parameter. Affected product: Gnuboard g6 (before the cited commit). Root cause: XSS in wr_content parameter. Impa...

CVE-2022-3963

CVE-2022-3963 affects gnuboard5, targeting the FAQ Key ID Handler in file bbs/faq.php. The issue is a cross-site scripting (XSS) vulnerability caused by manipulating the fm_id parameter, enabling remote exploitation. A fix is available in version 5.5.8.2.1, with patch identifier ba062ca5b62809106...

CVE-2024-39097

Gnuboard v6.0.4 and earlier is affected by an Open Redirect in the login path via the url parameter. Root cause: improper validation/tainting of the login URL leads to redirection to an attacker-controlled site. Impact: user could be redirected to malicious sites (CVSS: 6.1, MEDIUM; network vecto...

CVE-2018-15584

CVE-2018-15584 is an XSS vulnerability in gnuboard5 prior to 5.3.1.6. The issue affects the administrative components adm/boardgroup_form_update.php and adm/boardgroup_list_update.php, where user-supplied input can be injected as script/HTML. This vulnerability is exploitable by remote attackers ...

CVE-2018-15581

The CVE-2018-15581 entry concerns gnuboard5: Cross-Site Scripting (XSS) in adm/faqmasterformupdate.php prior to version 5.3.1.6. The PT-2019-9127 document provides explicit affected versions and remediation: gnuboard5 versions before 5.3.1.6 are vulnerable due to an XSS in adm/faqmasterformupdate...

CVE-2018-15582

CVE-2018-15582 is a Cross-Site Scripting (XSS) vulnerability in gnuboard5, affecting adm/sms_admin/num_book_write.php and adm/sms_admin/num_book_update.php on versions before 5.3.1.6. The issue allows remote attackers to inject arbitrary web script or HTML. The connected PT-2019-9128 entry confir...

CVE-2018-15585

GNUBOARD5 before 5.3.1.6 is affected by an XSS in newwinform.php via the popup title parameter. The issue enables remote attackers to inject arbitrary script/HTML in web pages. Affected product: GNUBOARD5; vulnerable component: newwinform.php (popup title). Root cause is unvalidated input in the ...

CVE-2018-15580

GnuBoard5’s adm/contentformupdate.php is affected by a Cross-Site Scripting (XSS) vulnerability in versions prior to 5.3.1.6. The issue allows remote attackers to inject arbitrary web script or HTML. According to PT-2019-9126, affected software is Gnuboard5 before 5.3.1.6, with a suggested fix to...

CVE-2018-18678

GNUBOARD5 before 5.3.2.0 is vulnerable to a stored/reflected-like XSS via the board group extra contents parameter in adm/boardgroup_form_update.php (gr_1~10). The issue affects GNUBOARD5 versions prior to 5.3.2.0 and can allow remote attackers to inject arbitrary scripts or HTML that execute in ...

CVE-2018-15583

GNUBOARD5 (web forum, PHP/MySQL) contains a Cross-Site Scripting (XSS) flaw in point_list.php, exploitable via the popup title parameter. Affected versions are prior to 5.3.1.6. The vulnerability could allow remote attackers to execute arbitrary web script/HTML. Remediation: upgrade to GNUBOARD5 ...