Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file, (2) x, and (3) y parameters in (a) admin/filemanager/preview.php; and the (4) email parameter in (b) admin/login.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CubeCart 多个跨站脚本攻击(XSS)漏洞
Vulnerability Description
CubeCart 3.0.11及早期版本中存在多个跨站脚本攻击(XSS)漏洞,远程攻击者可通过以下参数注入任意Web脚本或HTML:提交到(a) admin/filemanager/preview.php中脚本中的(1) (1) file,(2) x和 (3) y参数;和(4) (b) admin/login.php脚本中的email参数。
CVSS Information
N/A
Vulnerability Type
N/A