Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CASAP Automated Enrollment 跨站脚本漏洞
Vulnerability Description
CASAP Automated Enrollment是美国CASAP组织的一个自动注册系统。该项目的目的是为CASAP提供一个自动化的注册系统，以简化学校的流程，并使其更加有效，高效且易于检索。 CASAP Automated Enrollment System 1.0版本存在跨站脚本漏洞，该漏洞源于users.php缺少对客户端数据的正确验证。攻击者可以窃取cookie来执行用户重定向到恶意网站。
CVSS Information
N/A
Vulnerability Type
N/A