Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpBB远程跨站脚本执行漏洞
Vulnerability Description
phpBB是一款免费开放源代码的WEB论坛/社区程序,由php语言实现,可以运行在unix/linux、MacOS、Microsoft Windows系统下。 phpBB包含的viewtopic.php脚本对用户提交的输入缺少充分过滤,远程攻击者可以利用这个漏洞利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 viewtopic.php脚本对用户提交的$highlight变量内容缺少过滤,提交包含恶意脚本代码的数据,并诱使用户点击此链接,可导致脚本代码在用户浏览器中执行,借此可以得到用户基于Cooki
CVSS Information
N/A
Vulnerability Type
N/A