gnuboard/gnuboard5

GitHub

github.com

Releases246

Frequency2 weeks 3 days

Last Release 10 days ago

Stars342

그누보드5 (영카트 포함) 공개형 Git

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-60859 ↗	Oct 23, 2025Thursday, 23 October 2025, 19:15	6.1 MEDIUM	—
Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_comment.php.
CVE-2024-37658 ↗	Jul 7, 2025Monday, 7 July 2025, 18:15	6.1 MEDIUM	—
An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the bbs/member_confirm.php.
CVE-2024-37657 ↗	Jul 7, 2025Monday, 7 July 2025, 18:15	6.1 MEDIUM	—
An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via thebbs/login.php component.
CVE-2024-37656 ↗	Jul 7, 2025Monday, 7 July 2025, 18:15	6.1 MEDIUM	—
An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the insufficient URL parameter verification in bbs/logout.php.
CVE-2022-44216 ↗	Feb 20, 2023Monday, 20 February 2023, 20:15	7.5 HIGH	—
Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's original password.
CVE-2022-3963 ↗	Nov 12, 2022Saturday, 12 November 2022, 22:15	3.5 LOW	—
A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fm_id leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 5.5.8.2.1 is able to address this issue. The name of the patch is ba062ca5b62809106d5a2f7df942ffcb44ecb5a9. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213540.
CVE-2021-3831 ↗	Dec 14, 2021Tuesday, 14 December 2021, 11:15	6.1 MEDIUM	4.3 MEDIUM
gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-18663 ↗	Jun 24, 2021Thursday, 24 June 2021, 16:15	6.1 MEDIUM	4.3 MEDIUM
Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the act parameter in bbs/move_update.php.
CVE-2020-18662 ↗	Jun 24, 2021Thursday, 24 June 2021, 16:15	9.8 CRITICAL	7.5 HIGH
SQL Injection vulnerability in gnuboard5 <=v5.3.2.8 via the table_prefix parameter in install_db.php.
CVE-2020-18661 ↗	Jun 24, 2021Thursday, 24 June 2021, 15:15	6.1 MEDIUM	4.3 MEDIUM
Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the url parameter to bbs/login.php.
CVE-2018-18674 ↗	Nov 7, 2019Thursday, 7 November 2019, 21:15	6.1 MEDIUM	4.3 MEDIUM
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter.
CVE-2018-18678 ↗	Oct 30, 2019Wednesday, 30 October 2019, 18:15	6.1 MEDIUM	4.3 MEDIUM
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroup_form_update.php gr_1~10 parameter.
CVE-2018-18668 ↗	Aug 26, 2019Monday, 26 August 2019, 21:15	—	4.3 MEDIUM
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter.
CVE-2018-18676 ↗	Jul 23, 2019Tuesday, 23 July 2019, 17:15	—	4.3 MEDIUM
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail contents" parameter, aka the adm/board_form_update.php bo_mobile_content_tail parameter.
CVE-2018-18675 ↗	Jul 23, 2019Tuesday, 23 July 2019, 17:15	—	4.3 MEDIUM
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" parameter, aka the adm/board_form_update.php bo_mobile_subject parameter.
CVE-2018-18672 ↗	Jul 23, 2019Tuesday, 23 July 2019, 17:15	—	4.3 MEDIUM
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka the adm/board_form_update.php bo_content_head parameter.
CVE-2018-18670 ↗	Jul 23, 2019Tuesday, 23 July 2019, 17:15	—	4.3 MEDIUM
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/config_form_update.php cf_1~10 parameter.
CVE-2018-18673 ↗	Jul 23, 2019Tuesday, 23 July 2019, 16:15	—	4.3 MEDIUM
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parameter, aka the adm/menu_list_update.php me_link parameter.
CVE-2018-18671 ↗	Jul 23, 2019Tuesday, 23 July 2019, 16:15	—	4.3 MEDIUM
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head contents" parameter, aka the adm/board_form_update.php bo_mobile_content_head parameter.
CVE-2018-18669 ↗	Jul 23, 2019Tuesday, 23 July 2019, 15:15	—	4.3 MEDIUM
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka the adm/board_form_update.php bo_subject parameter.
CVE-2018-15580 ↗	Apr 26, 2019Friday, 26 April 2019, 20:29	—	4.3 MEDIUM
Cross-Site Scripting (XSS) vulnerability in adm/contentformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVE-2018-15584 ↗	Apr 26, 2019Friday, 26 April 2019, 20:29	—	4.3 MEDIUM
Cross-Site Scripting (XSS) vulnerability in adm/boardgroup_form_update.php and adm/boardgroup_list_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVE-2018-15582 ↗	Apr 26, 2019Friday, 26 April 2019, 20:29	—	4.3 MEDIUM
Cross-Site Scripting (XSS) vulnerability in adm/sms_admin/num_book_write.php and adm/sms_admin/num_book_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVE-2018-15581 ↗	Apr 26, 2019Friday, 26 April 2019, 20:29	—	4.3 MEDIUM
Cross-Site Scripting (XSS) vulnerability in adm/faqmasterformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVE-2018-15585 ↗	Mar 27, 2019Wednesday, 27 March 2019, 20:29	—	4.3 MEDIUM
Cross-Site Scripting (XSS) vulnerability in newwinform.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter.
CVE-2018-15583 ↗	Mar 25, 2019Monday, 25 March 2019, 21:29	6.1 MEDIUM	4.3 MEDIUM
Cross-Site Scripting (XSS) vulnerability in point_list.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter.