Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GForge Group GForge Advanced Server 跨站脚本漏洞
Vulnerability Description
GForge Group GForge Advanced Server是美国GForge Group公司的一套团队协作和项目管理软件。该软件提供项目托管、版本控制、代码审查、发布管理、持续集成和消息传递等功能。 GForge Group GForge Advanced Server 6.4.4版本中存在跨站脚本漏洞，该漏洞源于commonsearch.php代码没有正确地过滤用户提交的HTML代码。远程攻击者可借助‘words’参数利用该漏洞执行任意的脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A