https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-60859.htmlhttps://patchthecve.com/cve/CVE-2025-60859.htmlWed, 17 Jun 2026 09:50:09 +0000MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_comment.php.https://patchthecve.com/cve/CVE-2025-61464.htmlhttps://patchthecve.com/cve/CVE-2025-61464.htmlWed, 17 Jun 2026 09:50:31 +0000MEDIUM 6.5: gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the search_table in bbs/search.php.https://patchthecve.com/cve/CVE-2025-7786.htmlhttps://patchthecve.com/cve/CVE-2025-7786.htmlWed, 17 Jun 2026 10:05:39 +0000LOW 3.5: A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotehttps://patchthecve.com/cve/CVE-2024-37658.htmlhttps://patchthecve.com/cve/CVE-2024-37658.htmlWed, 17 Jun 2026 07:38:44 +0000MEDIUM 6.1: An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the bbs/member_confirm.php.https://patchthecve.com/cve/CVE-2024-37657.htmlhttps://patchthecve.com/cve/CVE-2024-37657.htmlWed, 17 Jun 2026 07:38:44 +0000MEDIUM 6.1: An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via thebbs/login.php component.https://patchthecve.com/cve/CVE-2024-37656.htmlhttps://patchthecve.com/cve/CVE-2024-37656.htmlWed, 17 Jun 2026 07:38:44 +0000MEDIUM 6.1: An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the insufficient URL parameter verification in bbs/logout.php.https://patchthecve.com/cve/CVE-2024-39097.htmlhttps://patchthecve.com/cve/CVE-2024-39097.htmlWed, 17 Jun 2026 07:41:26 +0000MEDIUM 6.1: There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the `url` parameter in login path.https://patchthecve.com/cve/CVE-2024-41475.htmlhttps://patchthecve.com/cve/CVE-2024-41475.htmlWed, 17 Jun 2026 07:47:46 +0000HIGH 8.8: Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration.https://patchthecve.com/cve/CVE-2024-24157.htmlhttps://patchthecve.com/cve/CVE-2024-24157.htmlWed, 17 Jun 2026 07:14:11 +0000MEDIUM 6.1: Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting (XSS) via board.py.