Vulnerabilities > SIR
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-07-23 | CVE-2018-18669 | Cross-site Scripting vulnerability in SIR Gnuboard 5.3.1.9 GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka the adm/board_form_update.php bo_subject parameter. | 6.1 |
| 2019-04-26 | CVE-2018-15584 | Cross-site Scripting vulnerability in SIR Gnuboard Cross-Site Scripting (XSS) vulnerability in adm/boardgroup_form_update.php and adm/boardgroup_list_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML. | 6.1 |
| 2019-04-26 | CVE-2018-15582 | Cross-site Scripting vulnerability in SIR Gnuboard Cross-Site Scripting (XSS) vulnerability in adm/sms_admin/num_book_write.php and adm/sms_admin/num_book_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML. | 6.1 |
| 2019-04-26 | CVE-2018-15581 | Cross-site Scripting vulnerability in SIR Gnuboard Cross-Site Scripting (XSS) vulnerability in adm/faqmasterformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML. | 6.1 |
| 2019-04-26 | CVE-2018-15580 | Cross-site Scripting vulnerability in SIR Gnuboard Cross-Site Scripting (XSS) vulnerability in adm/contentformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML. | 6.1 |
| 2019-03-27 | CVE-2018-15585 | Cross-site Scripting vulnerability in SIR Gnuboard Cross-Site Scripting (XSS) vulnerability in newwinform.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter. | 6.1 |
| 2019-03-25 | CVE-2018-15583 | Cross-site Scripting vulnerability in SIR Gnuboard Cross-Site Scripting (XSS) vulnerability in point_list.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter. | 6.1 |
| 2014-03-19 | CVE-2014-2339 | SQL Injection vulnerability in SIR Gnuboard Multiple SQL injection vulnerabilities in bbs/ajax.autosave.php in GNUboard 5.x and possibly earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) subject or (2) content parameter. | 6.5 |
| 2012-09-06 | CVE-2012-4873 | Cross-Site Scripting vulnerability in SIR Gnuboard 4.31.3/4.31.4/4.33.2 Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter. | 4.3 |
| 2011-11-04 | CVE-2011-4066 | SQL Injection vulnerability in SIR Gnuboard SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO. | 7.5 |