Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
paFileDB 'functions.php' 跨站脚本攻击漏洞
Vulnerability Description
paFileDB 3.1及更早版本的functions.php的jumpmenu函数中存在跨站脚本攻击(XSS)漏洞,远程攻击者可以通过$pageurl变量中未正确清除的URL参数注入任意Web脚本或HTML,如同使用pafiledb.php呈现的一样。
CVSS Information
N/A
Vulnerability Type
N/A