漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
phpipam Import Preview import-load-data.php cross site scripting
Vulnerability Description
A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/admin/import-export/import-load-data.php of the component Import Preview Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.5.0 is able to address this issue. The name of the patch is 22c797c3583001211fe7d31bccd3f1d4aeeb3bbc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-212863.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
对消息或数据结构的处理不恰当
Vulnerability Title
phpIPAM 跨站脚本漏洞
Vulnerability Description
phpIPAM是一套开源的基于PHP和MySQL的IP地址管理应用程序(IPAM)。 phpIPAM 存在安全漏洞,该漏洞源于 Import Preview Handler 组件的 app/admin/import-export/import-load-data.php 文件中的未知功能存在跨站脚本问题。
CVSS Information
N/A
Vulnerability Type
N/A