Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.2, and 4.7.x before 4.7.7, (1) allow remote attackers to inject arbitrary web script or HTML via "some server variables," including PHP_SELF; and (2) allow remote authenticated administrators to inject arbitrary web script or HTML via custom content type names.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal 多个跨站脚本漏洞
Vulnerability Description
Drupal 5.2版本之前的5.x版本和4.7.7版本之前的4.7.x版本中存在多个跨站脚本攻击漏洞。(1)远程攻击者可以借助"一些服务器自变量" 包括PHP_SELF，注入任意web脚本或HTML;和(2)远程验证管理员可以借助客户内容种类名称，注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A