Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the default URI or (2) includes/javascript.php, or the (3) title or (4) body parameter to admin/help.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Chyrp多个跨站脚本攻击漏洞
Vulnerability Description
Chyrp是一款开源的基于PHP和MySQL的轻量级博客(Blog)引擎。 Chyrp 2.1及之前版本中存在多个跨站脚本攻击漏洞。借助action参数向admin/index.php和includes/javascript.php传递的输入,以及借助title和body参数向admin/help.php传递的输入没有经过正确过滤就返回给了用户。远程攻击者可利用此漏洞执行受影响站点上下文用户浏览器会话中的任意HTML和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A