CVE-2023-1200

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in ehuacui bbs. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-222388.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
ehuacui	bbs	n/a

References

https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCBExploit, Third Party Advisory
https://vuldb.com/?ctiid.222388Permissions Required, Third Party Advisory
https://vuldb.com/?id.222388Third Party Advisory
https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCBExploit, Third Party Advisory
https://vuldb.com/?ctiid.222388Permissions Required, Third Party Advisory
https://vuldb.com/?id.222388Third Party Advisory

Timeline

Published: Mar 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-12016.5Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that posse CVE-2023-12026.5Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions CVE-2023-12036.5Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Modu CVE-2023-12044.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 befo CVE-2023-12058.8NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly im CVE-2023-12065.7A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of CVE-2023-12077.2This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL I CVE-2023-12087.2This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution CVE-2023-12095.4Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts.CVE-2023-12104.3An issue has been discovered in GitLab affecting all versions starting from 12.9 before 16.0.8, all versions starting from 16.1 before 16.1.CVE-2023-12117.2SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.CVE-2023-12124.8Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2.