Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) user[msn], (2) user[email], and (3) user[phone] parameters in a modifyDetails action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
6kbbs ajaxmember.php多个跨站脚本攻击漏洞
Vulnerability Description
6kbbs是一个采用PHP+MySQL构建的高效能的论坛程序，拥有代码简洁、使用方便、功能强大、速度极快等优点。 6kbbs 8.0 build 20100901中的ajaxmember.php中存在多个跨站脚本攻击漏洞。远程攻击者可借助modifyDetails操作中的user[msn]，user[email]和user[phone]参数注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A