Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) delete-announce.php; the (2) Announcement form field in (b) staff.php; the (3) Client Name, (4) Business Name, (5) Street, (6) Address 2, (7) Town/City, (8) Postcode, (9) Phone Number, (10) Email Address and (11) Website Address form fields in (c) new_customer.php; and unspecified fields in (d) search.php and (e) client-results.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fix和Chips CMS多个跨站攻击漏洞
Vulnerability Description
Fix和Chips CMS 1.0中存在多个跨站攻击漏洞。远程攻击者可以借助(a)delete-announce.php中的(1)id参数、(b)staff.php中的(2)通知格式字段、(c)new_customer.php中的(3)客户名、(4)公司名、(5)街道、(6)地址2、(7)乡镇/城市、(8)邮编、(9)电话号码、(10)电子邮件地址和(11)网站地址格式字段以及(d)search.php和(e)client-results.php中的未明字段，注入任意的web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A