Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting (XSS) attacks by replacing the ">" in the tag with a "<", which bypasses the regular expressions that sanitize the data, but is automatically corrected by many web browsers. NOTE: it could be argued that this vulnerability is due to a design limitation of many web browsers; if so, then this should not be treated as a vulnerability in PHP-Nuke.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPNuke内容过滤绕过漏洞
Vulnerability Description
PHP-Nuke 7.9及更高版本中的includes/mainfile.php存在解释冲突，远程攻击者可以通过将标签中的">"替换为"<"(可绕过净化数据的正则表达式但会被众多web浏览器自动校正)执行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A