Sir Gnuboard vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Sir Gnuboard: 2 record(s), with affected versions and fixes.
cpe:2.3:a:sir:gnuboard

CVE-2025-60859 Medium · 6.1 CWE-79 Oct 23, 2025

Cross-site Scripting (XSS) in Sir Gnuboard

Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_comment.php.

CVE-2025-61464 Medium · 6.5 CWE-89 Oct 23, 2025

SQL Injection in Sir Gnuboard

gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the search_table in bbs/search.php.