Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary ref_XXX parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Feng Office ‘index.php’ 跨站脚本漏洞
Vulnerability Description
Feng Office（前称OpenGoo）是Feng Office团队开发的一套开源的网上办公系统。该系统提供任务管理、日程管理、文件管理以及Email收发等功能。 Feng Office 2.3.2-rc及之前的版本中的index.php脚本中存在跨站脚本漏洞。远程攻击者可借助‘ref_[any]’参数利用该漏洞注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A