CVE-2018-15584

Cross-Site Scripting (XSS) vulnerability in adm/boardgroup_form_update.php and adm/boardgroup_list_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.

• CWE-79

• https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-0e9aa589be0cec73df5f154aa40f5b06Patch, Third Party Advisory
• https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-22d0b3c0987a60483473990fc07f1886Patch, Third Party Advisory
• https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-0e9aa589be0cec73df5f154aa40f5b06Patch, Third Party Advisory
• https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-22d0b3c0987a60483473990fc07f1886Patch, Third Party Advisory

Published

Apr 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15576An issue was discovered in EasyLogin Pro through 1.3.0. Encr…
• CVE-2018-1558IBM Rational Collaborative Lifecycle Management 5.0 through …5.4
• CVE-2018-15580Cross-Site Scripting (XSS) vulnerability in adm/contentformu…
• CVE-2018-15581Cross-Site Scripting (XSS) vulnerability in adm/faqmasterfor…
• CVE-2018-15582Cross-Site Scripting (XSS) vulnerability in adm/sms_admin/nu…
• CVE-2018-15583Cross-Site Scripting (XSS) vulnerability in point_list.php i…6.1
• CVE-2018-15585Cross-Site Scripting (XSS) vulnerability in newwinform.php i…
• CVE-2018-15586Enigmail before 2.0.6 is prone to to OpenPGP signatures bein…
• CVE-2018-15587GNOME Evolution through 3.28.2 is prone to OpenPGP signature…
• CVE-2018-15588MailMate before 1.11.3 mishandles a suspicious HTML/MIME str…
• CVE-2018-15590An issue was discovered in Ivanti Workspace Control before 1…
• CVE-2018-15591An issue was discovered in Ivanti Workspace Control before 1…