Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in WoltLab Burning Board (wbboard) 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Burning Board跨站脚本执行漏洞
Vulnerability Description
Burning Board是一款由PHP编写，MySQL后台支持的WEB论坛程序，可运行在Unix和Linux操作系统下，也可以运行在Microsoft windows操作系统下。 Burning Board对用户提交的URL参数缺少正确的检查，可导致远程攻击者进行跨站脚本执行攻击。 攻击者可以创建一个链接，在此链接的中插入恶意的参数并提交到论坛上，可以导致点击此链接用户以自己的权限执行恶意的操作。用户必须通过基于Cookie的登录认证，才能执行正常的操作，恶意链接中可以包括BBCode。
CVSS Information
N/A
Vulnerability Type
N/A