Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Wfilter ICF 5.0.117 contains a cross-site scripting (XSS) vulnerability. An attacker in the same LAN can craft a packet with a malicious User-Agent header to inject a payload in its logs, where an attacker can take over the system by through its plugin-running function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WFilter ICF 跨站脚本漏洞
Vulnerability Description
WFilter ICF是WFilter开源的一个应用软件。提供一个基于Web的内容管理系统。 Wfilter ICF 5.0.117版本存在跨站脚本漏洞,攻击者可利用该漏洞可以通过其运行插件的功能接管系统。
CVSS Information
N/A
Vulnerability Type
N/A