Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and 'Path to File' or 'URL to File' display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal FileField模块多个HTML注入漏洞
Vulnerability Description
Drupal是很著名的开源内容管理平台，仿照了blog程序模式，但比普通的blog更灵活，可以做各种网站的内容管理平台。 Drupal的FileField模块存在跨站脚本攻击漏洞。具有创建和编辑权限认证用户可以查看‘文件路径’或者‘文件的URL’，从而借助文件名（filepath参数）注入任意的web脚本和HTML。
CVSS Information
N/A
Vulnerability Type
N/A