Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the nome parameter in a login operation, a variant of CVE-2005-3306.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FlatNuke 'form/index.php' 跨站脚本攻击
Vulnerability Description
FlatNuke 是一个PHP 开发的内容管理系统,无须数据库支持,使用的是文本文件来保存内容。 FlatNuke 2.5.6的forum/index.php中存在跨站脚本攻击(XSS)漏洞。远程攻击者可以借助login操作中的nome参数,注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A