thisgun

21 exploits Active since Mar 2019
CVE-2018-15585 WRITEUP MEDIUM WRITEUP
GNUBOARD5 < 5.3.1.6 - Cross-Site Scripting via Popup Title Parameter
Cross-Site Scripting (XSS) vulnerability in newwinform.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter.
CVSS 6.1
CVE-2018-15582 WRITEUP MEDIUM WRITEUP
gnuboard < 5.3.1.6 - Cross-Site Scripting in SMS Admin Number Book
Cross-Site Scripting (XSS) vulnerability in adm/sms_admin/num_book_write.php and adm/sms_admin/num_book_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS 6.1
CVE-2018-15583 WRITEUP MEDIUM WRITEUP
GNUBOARD5 < 5.3.1.6 - Cross-Site Scripting via Popup Title Parameter
Cross-Site Scripting (XSS) vulnerability in point_list.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter.
CVSS 6.1
CVE-2018-15584 WRITEUP MEDIUM WRITEUP
gnuboard < 5.3.1.6 - Cross-Site Scripting in Board Group Management
Cross-Site Scripting (XSS) vulnerability in adm/boardgroup_form_update.php and adm/boardgroup_list_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS 6.1
CVE-2018-15580 WRITEUP MEDIUM WRITEUP
gnuboard < 5.3.1.6 - Cross-Site Scripting in adm/contentformupdate.php
Cross-Site Scripting (XSS) vulnerability in adm/contentformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS 6.1
CVE-2018-15581 WRITEUP MEDIUM WRITEUP
gnuboard < 5.3.1.6 - Cross-Site Scripting in adm/faqmasterformupdate.php
Cross-Site Scripting (XSS) vulnerability in adm/faqmasterformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS 6.1
CVE-2018-15582 WRITEUP MEDIUM WRITEUP
gnuboard < 5.3.1.6 - Cross-Site Scripting in SMS Admin Number Book
Cross-Site Scripting (XSS) vulnerability in adm/sms_admin/num_book_write.php and adm/sms_admin/num_book_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS 6.1
CVE-2018-15584 WRITEUP MEDIUM WRITEUP
gnuboard < 5.3.1.6 - Cross-Site Scripting in Board Group Management
Cross-Site Scripting (XSS) vulnerability in adm/boardgroup_form_update.php and adm/boardgroup_list_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS 6.1
CVE-2018-18668 WRITEUP MEDIUM WRITEUP
GNUBOARD5 < 5.3.2.0 - Stored Cross-Site Scripting via Homepage Title Parameter
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter.
CVSS 6.1
CVE-2018-18669 WRITEUP MEDIUM WRITEUP
GNUBOARD5 5.3.1.9 - Stored Cross-Site Scripting via Board Title Parameter
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka the adm/board_form_update.php bo_subject parameter.
CVSS 6.1
CVE-2018-18670 WRITEUP MEDIUM WRITEUP
GNUBOARD5 5.3.1.9 - Stored Cross-Site Scripting via Extra Contents Parameter
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/config_form_update.php cf_1~10 parameter.
CVSS 6.1
CVE-2018-18671 WRITEUP MEDIUM WRITEUP
GNUBOARD5 5.3.1.9 - Stored Cross-Site Scripting via Mobile Board Head Contents Parameter
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head contents" parameter, aka the adm/board_form_update.php bo_mobile_content_head parameter.
CVSS 6.1
CVE-2018-18672 WRITEUP MEDIUM WRITEUP
GNUBOARD5 5.3.1.9 - Stored Cross-Site Scripting via Board Head Contents Parameter
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka the adm/board_form_update.php bo_content_head parameter.
CVSS 6.1
CVE-2018-18673 WRITEUP MEDIUM WRITEUP
GNUBOARD5 5.3.1.9 - Stored Cross-Site Scripting via Menu Link Parameter
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parameter, aka the adm/menu_list_update.php me_link parameter.
CVSS 6.1
CVE-2018-18674 WRITEUP MEDIUM WRITEUP
GNUBOARD5 5.3.1.9 - Stored Cross-Site Scripting via Board Tail Contents Parameter
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter.
CVSS 6.1
CVE-2018-18675 WRITEUP MEDIUM WRITEUP
GNUBOARD5 5.3.1.9 - Stored Cross-Site Scripting via bo_mobile_subject Parameter
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" parameter, aka the adm/board_form_update.php bo_mobile_subject parameter.
CVSS 6.1
CVE-2018-18676 WRITEUP MEDIUM WRITEUP
GNUBOARD5 5.3.1.9 - Stored Cross-Site Scripting via bo_mobile_content_tail Parameter
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail contents" parameter, aka the adm/board_form_update.php bo_mobile_content_tail parameter.
CVSS 6.1
CVE-2018-18678 WRITEUP MEDIUM WRITEUP
GNUBOARD5 < 5.3.2.0 - Cross-Site Scripting via Board Group Extra Contents Parameter
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroup_form_update.php gr_1~10 parameter.
CVSS 6.1
CVE-2021-4293 WRITEUP LOW WRITEUP
gnuboard youngcart5 < 5.4.5.2 - Cross-Site Scripting via me_link Argument in adm/menu_list_update.php
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in gnuboard youngcart5 up to 5.4.5.1. Affected is an unknown function of the file adm/menu_list_update.php. The manipulation of the argument me_link leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 5.4.5.2 is able to address this issue. The name of the patch is 70daa537adfa47b87af12d85f1e698fff01785ff. It is recommended to upgrade the affected component. VDB-216954 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS 3.5
CVE-2022-3963 WRITEUP LOW WRITEUP
gnuboard < 5.5.8.2.1 - Cross-Site Scripting via FAQ Key ID Parameter
A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fm_id leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 5.5.8.2.1 is able to address this issue. The name of the patch is ba062ca5b62809106d5a2f7df942ffcb44ecb5a9. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213540.
CVSS 3.5
CVE-2025-60859 WRITEUP MEDIUM WRITEUP
Gnuboard 5.6.15 - Authenticated Cross-Site Scripting via c_id Parameter
Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_comment.php.
CVSS 6.1