Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPBB图象标记存在跨站脚本执行漏洞
Vulnerability Description
PHPBB是一款免费开放源代码的WEB论坛/社区程序,由php语言实现,可以运行在unix/linux、MacOS、Microsoft Windows系统下。 PHPBB对用户输入过滤上存在漏洞,可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 PHPBB支持在帖子中用户使用[img]/[/img]标记插入图象连接,但它未对标记中的内容做充分过滤,这可能导致攻击者在此标记的内容中放入脚本代码,当其他用户浏览相关此连接的时候,脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于COOKI
CVSS Information
N/A
Vulnerability Type
N/A