Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML or web script via search.php. NOTE: some sources have reported that the affected file is read.php, but this is inconsistent with the vendor's patch.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Phorum未明的跨站脚本和SQL注入漏洞
Vulnerability Description
Phorum 5.0.11及其以前的版本存在跨站脚本(XSS)漏洞。远程攻击者借助search.php注入任意HTML或者web脚本。
CVSS Information
N/A
Vulnerability Type
N/A