xiuno records

7 published records for vendor xiuno.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 4
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2019-19998No exploit	Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.xiuno · xiunobbs · CWE-611 Pre-auth XXE	High7.5	—	1.1%	Dec 26, 2019
24Monitor	CVE-2020-19914No exploit	Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload functxiuno · xiunobbs · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.7%	Sep 7, 2022
24Monitor	CVE-2020-21496No exploit	A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrarxiuno · xiunobbs · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.6%	Oct 4, 2021
24Monitor	CVE-2020-21494No exploit	A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary webxiuno · xiunobbs · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.6%	Oct 4, 2021
24Monitor	CVE-2020-21495No exploit	A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrarxiuno · xiunobbs · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.6%	Oct 4, 2021
24Monitor	CVE-2018-15559No exploit	The editor in Xiuno BBS 4.0.4 allows stored XSS.xiuno · xiunobbs · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Aug 19, 2018
21Monitor	CVE-2020-21493No exploit	An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.xiuno · xiunobbs Pre-auth	Medium5.3	—	0.9%	Oct 4, 2021

CVE-2019-19998
30Monitor
Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- XXE
xiuno · xiunobbsDec 26, 2019
CVE-2020-19914
24Monitor
Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload funct
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
xiuno · xiunobbsSep 7, 2022
CVE-2020-21496
24Monitor
A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrar
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
xiuno · xiunobbsOct 4, 2021
CVE-2020-21494
24Monitor
A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
xiuno · xiunobbsOct 4, 2021
CVE-2020-21495
24Monitor
A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrar
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
xiuno · xiunobbsOct 4, 2021
CVE-2018-15559
24Monitor
The editor in Xiuno BBS 4.0.4 allows stored XSS.
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
xiuno · xiunobbsAug 19, 2018
CVE-2020-21493
21Monitor
An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
xiuno · xiunobbsOct 4, 2021