Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DCP-Portal用户信息跨站脚本执行漏洞
Vulnerability Description
DCP-Portal是种内容管理系统，提供多种基于WEB方式的操作，比如更新站点、成员管理等等。 DCP-Portal存在跨站脚本执行漏洞。 攻击者首先注册一个用户，然后访问http://www.dcp-portal_host/user_update.php ，修改自己的job info，在此插入任意代码，比如 <script>alert("ALPERz was here!")</script> 当其它用户察看攻击者的个人信息时，这些script脚本就会在用户浏览器中执行。
CVSS Information
N/A
Vulnerability Type
N/A