Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow remote attackers to inject arbitrary web script or HTML via the (1) errorNo or (2) errorMsg parameter to error.php; the (3) viewType parameter to duplicate_manager.php; the (4) queryAction, (5) displayType, (6) citeOrder, (7) sqlQuery, (8) showQuery, (9) showLinks, (10) showRows, or (11) queryID parameter to query_manager.php; the (12) sourceText or (13) sourceIDs parameter to import.php; or the (14) typeName or (15) fileName parameter to modify.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Web Reference Database和bleeding-edge 跨站脚本漏洞
Vulnerability Description
Web Reference Database（又名refbase）是refbase社区所研发的一款基于Web提供搜索工具和自动生成索引对科学文献进行管理的多用户界面产品。bleeding-edge是其中的一个下载版本。 Web Reference Database 0.9.6及之前版本和bleeding-edge 2015-01-08之前版本中存在跨站脚本漏洞，该漏洞源于error.php脚本没有充分过滤‘errorNo’和‘errorMsg’参数；duplicate_manager.php脚本没有充分过
CVSS Information
N/A
Vulnerability Type
N/A