Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Board-TNK web信息存在跨站脚本执行漏洞
Vulnerability Description
Linux-Sottises Board-TNK是一款由PHP实现的讨论公告板程序,运行Linux系统平台下。 Linux-Sottises Board-TNK对用户输入过滤上存在漏洞,可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 Linux-Sottises Board-TNK在当回贴或者建立主题时的"WEB"输入栏中的信息没有充分过滤,可导致攻击者在这栏的内容中放入脚本代码,当其他用户浏览相关此连接的时候,脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于COOKIE的认证信
CVSS Information
N/A
Vulnerability Type
N/A