Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) func parameter to index.php, or the (2) lang parameter to index.php, which is not properly handled by ZLanguage.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zikula Application Framework 多个跨站脚本攻击漏洞
Vulnerability Description
Zikula是一个Web应用程序工具包，它允许你运行令人印象深刻的网站和建立强大的在线应用。 Zikula Application Framework存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过(1)index.php的func参数，或者(2)index.php的lang参数注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A