Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges and also to execute JavaScript against other users (including unauthenticated users), via the name, title, or id parameter to plugins/dokuwiki/lib/plugins/changelinks/syntax.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Flyspray 跨站脚本漏洞
Vulnerability Description
Flyspray是一个基于web的bug追踪系统软件。 Flyspray 1.0-rc4 before 1.0-rc6之前的1.0-rc4版本中存在跨站脚本漏洞。远程攻击者可通过向plugins/dokuwiki/lib/plugins/changelinks/syntax.php文件发送‘name’、‘title’或‘id’参数利用该漏洞获取管理员权限，执行JavaScript代码。
CVSS Information
N/A
Vulnerability Type
N/A