CVE-2018-18676

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail contents" parameter, aka the adm/board_form_update.php bo_mobile_content_tail parameter.
Configurations

Configuration 1 (hide)

cpe:2.3:a:sir:gnuboard:5.3.1.9:*:*:*:*:*:*:*

History

19 Sep 2024, 11:42

Type Values Removed Values Added
First Time Sir gnuboard
Sir
CPE cpe:2.3:a:gnuboard:gnuboard5:5.3.1.9:*:*:*:*:*:*:* cpe:2.3:a:sir:gnuboard:5.3.1.9:*:*:*:*:*:*:*

Information

Published : 2019-07-23 17:15

Updated : 2024-09-19 11:42


NVD link : CVE-2018-18676

Mitre link : CVE-2018-18676

CVE.ORG link : CVE-2018-18676


JSON object : View

Products Affected

sir

  • gnuboard
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')