Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) error_meldung parameter to admin/features/register/register.php, the (2) feature_language[ueberschrift] parameter to admin/features/memberlist/memberlist.php, the (3) language_array[ueberschrift] parameter to admin/features/lostpassword/lostpassword.php, the (4) language_feature[titel] parameter to admin/features/kalender/eingabe.php, and the (5) language_feature[bildmenu] parameter to admin/features/fotogalerie/eingabe.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
homeph_design 跨站脚本攻击漏洞
Vulnerability Description
HomePH Design 是一个开源的基于php的CMS系统。 HomePH Design 2.10 RC2存在多个跨站脚本攻击漏洞，远程攻击者通过(1) 对admin/Ruby on Rails（Rails）是一个使用Ruby语言写的开源Web应用框架。features是其中的一个文本解析器。/register/register.php的error_meldung参数,(2) 对admin/Ruby on Rails（Rails）是一个使用Ruby语言写的开源Web应用框架。features是其中的一
CVSS Information
N/A
Vulnerability Type
N/A