exploitDog

CVE-2020-18661

Опубликовано: 24 июн. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the url parameter to bbs/login.php.

Ссылки

https://github.com/LoRexxar/CVE_Request/tree/master/gnuboard5%20mul%20vuls%20before%20v5.3.2.8#limited-reflective-xss-in-bbsloginphp
Third Party Advisory
https://github.com/gnuboard/gnuboard5/issues/43
Exploit
Third Party Advisory
https://www.seebug.org/vuldb/ssvid-97925
Third Party Advisory
https://github.com/LoRexxar/CVE_Request/tree/master/gnuboard5%20mul%20vuls%20before%20v5.3.2.8#limited-reflective-xss-in-bbsloginphp
Third Party Advisory
https://github.com/gnuboard/gnuboard5/issues/43
Exploit
Third Party Advisory
https://www.seebug.org/vuldb/ssvid-97925
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sir:gnuboard:*:*:*:*:*:*:*:*

Версия до 5.3.2.8 (включая)

EPSS

Процентиль: 53%

0.00307

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-jw3g-fq47-7q3j

CVSS3: 6.1

github

больше 3 лет назад

Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the url parameter to bbs/login.php.

EPSS

Процентиль: 53%

0.00307

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79