Cross-Site Scripting (XSS) vulnerability in adm/sms_admin/num_book_write.php and adm/sms_admin/num_book_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
References
Link | Resource |
---|---|
https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-72e9a967d5cebb96734e6f6984091e66 | Patch Third Party Advisory |
https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-737f14a5f5bdad53c5ce9b3ec628bf6d | Patch Third Party Advisory |
Configurations
History
19 Sep 2024, 11:42
Type | Values Removed | Values Added |
---|---|---|
First Time |
Sir gnuboard
Sir |
|
CPE | cpe:2.3:a:sir:gnuboard:*:*:*:*:*:*:*:* |
Information
Published : 2019-04-26 20:29
Updated : 2024-09-19 11:42
NVD link : CVE-2018-15582
Mitre link : CVE-2018-15582
CVE.ORG link : CVE-2018-15582
JSON object : View
Products Affected
sir
- gnuboard
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')