Approved changes feed: RSS · Atom

cpe:2.3:a:sir:gnuboard:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSir (e23e80bb-f3f4-5e83-89ca-a982047ff56b)
ProductGnuboard (619099fa-e700-5019-a5f8-ea99909e8204)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gnuboard/gnuboard5 purl2cpe 2026-06-01 10:10:57.456081

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7786 vulnerable 2026-06-08 07:45:18.225976 Gnuboard g6 Post Reply qa cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-18T13:14:05.648Z
Updated: 2025-07-18T13:39:57.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61464 vulnerable 2026-06-08 07:37:27.554420 Details available
gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the search_table in bbs/search.php.
Published: 2025-10-23T00:00:00.000Z
Updated: 2025-10-23T20:38:25.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39097 vulnerable 2026-06-08 06:41:48.732345 Details available
There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the `url` parameter in login path.
Published: 2024-08-26T00:00:00.000Z
Updated: 2026-01-26T15:03:10.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24157 vulnerable 2026-06-08 06:29:41.159275 Details available
Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting (XSS) via board.py.
Published: 2024-05-09T18:18:38.592Z
Updated: 2025-03-25T15:42:13.407Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24156 vulnerable 2026-06-08 06:29:41.158717 Details available
Cross Site Scripting (XSS) vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wr_content parameter.
Published: 2024-03-16T00:00:00.000Z
Updated: 2024-08-19T19:39:50.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3963 vulnerable 2026-06-08 05:48:22.712761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1252 vulnerable 2026-06-08 05:39:12.494881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18663 vulnerable 2026-06-08 05:20:57.031739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18662 vulnerable 2026-06-08 05:20:57.031275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18661 vulnerable 2026-06-08 05:20:57.030667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18678 vulnerable 2026-06-08 05:11:14.465412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18668 vulnerable 2026-06-08 05:11:14.459921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15585 vulnerable 2026-06-08 05:10:55.116425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15584 vulnerable 2026-06-08 05:10:55.116095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15583 vulnerable 2026-06-08 05:10:55.115701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15582 vulnerable 2026-06-08 05:10:55.115374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15581 vulnerable 2026-06-08 05:10:55.115055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15580 vulnerable 2026-06-08 05:10:55.114563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2339 vulnerable 2026-06-08 05:05:28.506146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4873 vulnerable 2026-06-08 05:02:53.059387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4066 vulnerable 2026-06-08 04:59:28.913906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0269 vulnerable 2026-06-08 04:48:12.169048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.