Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dmasoftlab Radius Manager New User Group Script任意代码执行漏洞
Vulnerability Description
Radius Manager 3.8.0版本中存在多个跨站脚本攻击漏洞。远程认证管理员可以借助对admin.php文件的(a)update_usergroup或(b)store_nas操作中的(1)name或(2)descr参数注入任意web脚本或者HTML。
CVSS Information
N/A
Vulnerability Type
N/A