Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sims v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sims 跨站脚本漏洞
Vulnerability Description
Sims是中国RawChen个人开发者的一个学生信息管理系统。 Sims v1.0版本存在安全漏洞,该漏洞源于通过组件 /addNotifyServlet 发现存在跨站点脚本 (XSS) 漏洞。攻击者利用该漏洞通过注入 notifyInfo 参数的特制有效负载执行任意 Web 脚本或 HTML。
CVSS Information
N/A
Vulnerability Type
N/A