Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from 2014-01-15" allows remote attackers to conduct cross-site scripting (XSS) attacks via the oninput event handler in the fname parameter to the default URI in /reg.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rexx systems Rexx Recruitment ‘fname’参数跨站脚本漏洞
Vulnerability Description
Rexx systems Rexx Recruitment是德国Rexx systems公司的一套基于Web的招聘应用。 Rexx systems Rexx Recruitment R6.1版本和R7版本中user registration功能存在不完整黑名单漏洞，该漏洞源于/reg URI中的默认URL没有正确处理‘fname’参数。远程攻击者可借助特制的oninput事件处理器利用该漏洞实施跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A