Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using edit_profile.php to upload a (1) avatar or (2) forum image attachment that has a .gif or .jpg extension, and begins with a GIF header followed by JavaScript code, which is executed by Internet Explorer.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Fusion Avatar Image 'submit.php'多个跨站脚本攻击(XSS) 漏洞
Vulnerability Description
PHP-Fusion 6.01.3之前版本中的submit.php存在多个跨站脚本攻击(XSS) 漏洞。远程攻击者可以通过使用edit_profile.php 上传由Internet Explorer执行的，带有.gif或.jpg 扩展名的，以GIF标头开始后跟JavaScript代码的(1)头像或(2)论坛图像附件，注入任意Web脚本或HTML 。
CVSS Information
N/A
Vulnerability Type
N/A