Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NullLogic Null HTTPd错误页面跨站脚本执行漏洞
Vulnerability Description
NullLogic Null HTTPd是一款小型多线程WEB服务程序,可使用在Linux和Windows操作系统下。 NullLogic Null HTTPd在生成404错误页面时缺少过滤,远程攻击者可以利用这个漏洞进行跨站脚本执行攻击。 NullLogic Null HTTPd在生成404错误页面时对恶意HTML,JAVASCRIPT代码缺少正确过滤,攻击者可以构建包含恶意脚本代码的WEB页面,诱使用户点击,返回的应用程序错误页面信息NullLogic Null HTTPd会不经过任意过滤返回给客户端
CVSS Information
N/A
Vulnerability Type
N/A