thisgun

17 exploits Active since Apr 2019
CVE-2018-15580 WRITEUP MEDIUM WRITEUP
SIR Gnuboard < 5.3.1.6 - XSS
Cross-Site Scripting (XSS) vulnerability in adm/contentformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS 6.1
CVE-2018-15581 WRITEUP MEDIUM WRITEUP
SIR Gnuboard < 5.3.1.6 - XSS
Cross-Site Scripting (XSS) vulnerability in adm/faqmasterformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS 6.1
CVE-2018-15582 WRITEUP MEDIUM WRITEUP
SIR Gnuboard < 5.3.1.6 - XSS
Cross-Site Scripting (XSS) vulnerability in adm/sms_admin/num_book_write.php and adm/sms_admin/num_book_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS 6.1
CVE-2018-15584 WRITEUP MEDIUM WRITEUP
SIR Gnuboard < 5.3.1.6 - XSS
Cross-Site Scripting (XSS) vulnerability in adm/boardgroup_form_update.php and adm/boardgroup_list_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS 6.1
CVE-2018-18668 WRITEUP MEDIUM WRITEUP
SIR Gnuboard < 5.3.2.0 - XSS
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter.
CVSS 6.1
CVE-2018-18669 WRITEUP MEDIUM WRITEUP
SIR Gnuboard - XSS
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka the adm/board_form_update.php bo_subject parameter.
CVSS 6.1
CVE-2018-18670 WRITEUP MEDIUM WRITEUP
SIR Gnuboard - XSS
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/config_form_update.php cf_1~10 parameter.
CVSS 6.1
CVE-2018-18671 WRITEUP MEDIUM WRITEUP
SIR Gnuboard - XSS
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head contents" parameter, aka the adm/board_form_update.php bo_mobile_content_head parameter.
CVSS 6.1
CVE-2018-18672 WRITEUP MEDIUM WRITEUP
SIR Gnuboard - XSS
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka the adm/board_form_update.php bo_content_head parameter.
CVSS 6.1
CVE-2018-18673 WRITEUP MEDIUM WRITEUP
SIR Gnuboard - XSS
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parameter, aka the adm/menu_list_update.php me_link parameter.
CVSS 6.1
CVE-2018-18674 WRITEUP MEDIUM WRITEUP
SIR Gnuboard - XSS
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter.
CVSS 6.1
CVE-2018-18675 WRITEUP MEDIUM WRITEUP
SIR Gnuboard - XSS
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" parameter, aka the adm/board_form_update.php bo_mobile_subject parameter.
CVSS 6.1
CVE-2018-18676 WRITEUP MEDIUM WRITEUP
SIR Gnuboard - XSS
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail contents" parameter, aka the adm/board_form_update.php bo_mobile_content_tail parameter.
CVSS 6.1
CVE-2018-18678 WRITEUP MEDIUM WRITEUP
SIR Gnuboard < 5.3.2.0 - XSS
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroup_form_update.php gr_1~10 parameter.
CVSS 6.1
CVE-2021-4293 WRITEUP LOW WRITEUP
Gnuboard Youngcart5 <5.4.5.1 - XSS
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in gnuboard youngcart5 up to 5.4.5.1. Affected is an unknown function of the file adm/menu_list_update.php. The manipulation of the argument me_link leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 5.4.5.2 is able to address this issue. The name of the patch is 70daa537adfa47b87af12d85f1e698fff01785ff. It is recommended to upgrade the affected component. VDB-216954 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS 3.5
CVE-2022-3963 WRITEUP LOW WRITEUP
SIR Gnuboard < 5.5.8.2.1 - XSS
A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fm_id leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 5.5.8.2.1 is able to address this issue. The name of the patch is ba062ca5b62809106d5a2f7df942ffcb44ecb5a9. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213540.
CVSS 3.5
CVE-2025-60859 WRITEUP MEDIUM WRITEUP
Gnuboard 5.6.15 - XSS
Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_comment.php.
CVSS 6.1