Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pages parameter to divers.php (incorrectly referred to as "drivers.php" by some sources), (2) in the search feature text area, (3) forum name, (4) site name or (5) the maximum avatar size in the option section, (5) new category or (6) new forum fields in the forum section.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ProjectBB多个远程跨站脚本漏洞
Vulnerability Description
ProjectBB 0.4.5.1中的多个跨站脚本攻击(XSS)漏洞,允许远程攻击者通过(1)divers.php(一些报告错误地称为"drivers.php")的pages参数,(2)在搜索功能的文本区域中,选项部分的(3)forum name,(4)site name或(5)maximum avatar size,forum部分的(5)new category或(6)new forum字段来注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A