Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows remote attackers to inject arbitrary web script or HTML and gain leverage to execute arbitrary PHP code via the User-Agent HTTP header, which is displayed by admin/modules/general/statistic.php in the administration panel.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ReloadCMS User-Agent 跨站脚本攻击漏洞
Vulnerability Description
Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5以及早期版本中存在跨站脚本攻击漏洞，可让远程攻击者注入web脚本或HTML并且获得能力以执行任意的地PHP代码，方式是通过User-Agent HTTP头，这个头在管理面板中的admin/modules/general/statistic.php文件中。
CVSS Information
N/A
Vulnerability Type
N/A