Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into web archive pages via HTML mail messages.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MHonArc m2h_text_html过滤器跨站脚本执行漏洞
Vulnerability Description
MHonArc是一款PERL语言编写的自动解析HTML形式邮件内容的程序,包括在处理过程中从HTML邮件中过滤有危险性的JavaScript标记等功能。 MHonArc在过滤HTML邮件信息时缺少正确检查,远程攻击者可以利用这个漏洞构建恶意HTML邮件消息,发送给MHonArc系统,可绕过MHonArc使用的HTML过滤技术,产生跨站脚本可执行攻击。 当用户点击包含恶意脚本代码的链接时,可导致基于Cookie认证的信息泄露,或进行其他非法活动。 目前尚无具体漏洞细节。
CVSS Information
N/A
Vulnerability Type
N/A