Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incomplete blacklist vulnerability in the nk_CSS function in nuked.php in Nuked-Klan 1.7 SP4.3 allows remote attackers to bypass anti-XSS features and inject arbitrary web script or HTML via JavaScript in an attribute value that is not in the blacklist, as demonstrated using the STYLE attribute of a B element.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nuked-Klan 'nuked.php'nk_CSS函数 黑名单不完整漏洞
Vulnerability Description
Nuked-Klan 1.7 SP4.3中nuked.php的nk_CSS函数存在黑名单不完整漏洞，远程攻击者借助向不包含在黑名单中的任一属性值内加入的JavaScript，来绕过防御跨站脚本攻击功能，并注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A