CVE-2018-18673

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parameter, aka the adm/menu_list_update.php me_link parameter.
Configurations

Configuration 1 (hide)

cpe:2.3:a:sir:gnuboard:5.3.1.9:*:*:*:*:*:*:*

History

19 Sep 2024, 11:42

Type Values Removed Values Added
First Time Sir gnuboard
Sir
CPE cpe:2.3:a:gnuboard:gnuboard5:5.3.1.9:*:*:*:*:*:*:* cpe:2.3:a:sir:gnuboard:5.3.1.9:*:*:*:*:*:*:*

Information

Published : 2019-07-23 16:15

Updated : 2024-09-19 11:42


NVD link : CVE-2018-18673

Mitre link : CVE-2018-18673

CVE.ORG link : CVE-2018-18673


JSON object : View

Products Affected

sir

  • gnuboard
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')