Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header and certain other HTTP headers, which are displayed without proper sanitization when an administrator performs a Logged Guest action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jupiter CMS 'index.php'多个跨站脚本攻击漏洞
Vulnerability Description
Jupiter CMS 1.1.5版本的index.php中存在多个跨站脚本攻击漏洞。远程攻击者当一个管理员执行一个登陆客户端操作时，可以借助Referer HTTP页眉和某些其他的HTTP页眉, 且这些页眉未经过适当审查就发布，注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A