Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) realname and (2) comment parameters, or (3) via a javascript URI in the url parameter, when adding a comment.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CheesyBlog跨站脚本攻击漏洞
Vulnerability Description
CheesyBlog 1.0的archive.php中存在跨站脚本攻击(XSS)漏洞,远程攻击者可以在添加评论时通过(1) realname和(2) comment参数,或(3) 通过url参数中的javascript URI注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A