Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PostBoard IMG标记脚本执行漏洞
Vulnerability Description
PostBoard是一款免费开放源代码的PostNuke内容处理管理系统上的信息公告版模块，设计使用于Unix和Linux操作系统下。 PostBoard对用户提交给IMG标记的数据未进行充分正确的过滤，可导致攻击者进行跨站脚本执行攻击。 攻击者可以在IMG标记中嵌入恶意脚本代码，当其他浏览用户查看包含恶意脚本代码的链接时，就可以导致脚本代码在用户浏览器上执行，攻击者可能获得用户基于Cookie认证的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A