Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection attacks via (1) the id parameter to unapi.php or (2) the stylesheet parameter to sru.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Web Reference Database和bleeding-edge 安全漏洞
Vulnerability Description
Web Reference Database（又名refbase）是refbase社区所研发的一款基于Web提供搜索工具和自动生成索引对科学文献进行管理的多用户界面产品。bleeding-edge是其中的一个下载版本。 Web Reference Database 0.9.6及之前版本和bleeding-edge 2015-01-08之前版本中存在安全漏洞，该漏洞源于unapi.php脚本没有充分过滤‘id’参数；sru.php脚本没有充分过滤‘stylesheet’参数。远程攻击者可利用该漏洞实施XML
CVSS Information
N/A
Vulnerability Type
N/A