Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Fusion BBCode URL 跨站脚本漏洞
Vulnerability Description
PHP-Fusion是一个轻量级PHP开源内容管理系统。它采用mySQL数据库存储网站内容,并提供一个简单,全面的后台管理系统。PHP-Fusion包含大多数CMS系统所具有的功能。 PHP-Fusion 6.00.107及其早期版本中存在跨站脚本(XSS)漏洞。远程攻击者可利用该漏洞借助于嵌套的、畸形的URL BBCode标记向HTML中注入任意的web脚本。
CVSS Information
N/A
Vulnerability Type
N/A