Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xigla Absolute Form Processor XE 多个跨站脚本攻击漏洞
Vulnerability Description
Xigla Absolute Form Processor XE 4.0版本存在多个跨站脚本攻击漏洞。远程攻击者可以借助到search.asp的(1)showfields，(2)text和(3)submissions参数以及到users.asp的(4)name参数，注入任意的web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A