Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SoftBB 'index.php' 跨站脚本攻击漏洞
Vulnerability Description
SoftBB是一套基于Web的论坛程序。 SoftBB v0.1中存在多个输入验证错误,如下: 1) 在SQL查询时没有正确的验证对/addmembre.php文件中groupe参数及/moveto.php文件中select参数的输入,允许攻击者执行SQL注入攻击。 2) 在PHP脚本中存储之前没有正确过滤对admin/save_opt.php中多个参数的输入,允许攻击者执行任意PHP代码。成功攻击可能要求管理员权限。 3) 对index.php中page参数的输入没有正确的处理空的或无效的参数,攻击者可
CVSS Information
N/A
Vulnerability Type
N/A