CVE-2023-1200

A vulnerability was found in ehuacui bbs. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-222388.

• CWE-79

• https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCBExploit, Third Party Advisory
• https://vuldb.com/?ctiid.222388Permissions Required, Third Party Advisory
• https://vuldb.com/?id.222388Third Party Advisory
• https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCBExploit, Third Party Advisory
• https://vuldb.com/?ctiid.222388Permissions Required, Third Party Advisory
• https://vuldb.com/?id.222388Third Party Advisory

Published

Mar 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1193A use-after-free flaw was found in setup_async_work in the K…6.5
• CVE-2023-1194An out-of-bounds (OOB) memory read flaw was found in parse_l…8.1
• CVE-2023-1195A use-after-free flaw was found in reconn_set_ipaddr_from_ho…5.5
• CVE-2023-1196The Advanced Custom Fields (ACF) Free and Pro WordPress plug…8.8
• CVE-2023-1197Cross-site Scripting (XSS) - Stored in GitHub repository uvd…4.8
• CVE-2023-1198Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-1201Improper access control in the secure messages feature in De…6.5
• CVE-2023-1202Permission bypass when importing or synchronizing entries in…6.5
• CVE-2023-1203Improper removal of sensitive data in the entry edit feature…6.5
• CVE-2023-1204An issue has been discovered in GitLab CE/EE affecting all v…4.3
• CVE-2023-1205NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulner…8.8
• CVE-2023-1206A hash collision flaw was found in the IPv6 connection looku…5.7