Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the (1) uid parameter, (2) uid parameter in a login_lookup action, (3) uid parameter in an adminlogin action, (4) campaignid parameter in a createcampaign action, (5) type parameter in a view_account_stats action, (6) period parameter in a view_account_stats action, (7) uid parameter in a view_adrates action, (8) accname parameter in an account_confirmation action, (9) loginpass parameter in an account_confirmation action, (10) e9 parameter in a setup_account action, (11) from parameter in an email_advertisers action, (12) message parameter in an email_advertisers action, (13) idno parameter in an edit_ad_package action, (14) Advertiser Name field, (15) First Name field, (16) Last Name field, (17) Address field, (18) Phone Number field, (19) Password Hint field, or (20) URL field; and (21) allow remote authenticated users to inject arbitrary web script or HTML via an unspecified form associated with a view_adrates action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Impactsoftcompany AdPeeps 'index.php'多个跨站脚本攻击漏洞
Vulnerability Description
AdPeeps 8.5d1中index.php存在多个跨站脚本(XSS)攻击漏洞。远程攻击者可以借助(1)uid参数，(2)login_lookup操作中uid参数，(3)adminlogin操作中uid参数，(4)createcampaign操作中campaignid参数，(5)view_account_stats操作中type参数，(6)view_account_stats操作中period参数，(7)view_adrates操作中uid参数，(8)account_confirmation操作中acc
CVSS Information
N/A
Vulnerability Type
N/A