Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web script or HTML via the tid parameter in a team action to modules.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Nuke League模块跨站脚本攻击漏洞
Vulnerability Description
PHP-Nuke是一套基于Web的自动化新闻发布和内容管理系统,它包含新闻主题、文件下载、论坛管理等模块。League module是其中的一个模块。 PHP-Nuke中的League模块存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
CVSS Information
N/A
Vulnerability Type
N/A