漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate their privileges by exploiting a stored cross-site scripting (XSS) vulnerability in the switch group function under /#ilang=DE&b=c_smartenergy_swgroups in the web portal. The vulnerability can be exploited to gain the rights of an installer or PM, which can then be used to gain administrative access to the web portal and execute further attacks. NOTE: The vendor states that this vulnerability has been fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Solar-Log GmbH Base 跨站脚本漏洞
Vulnerability Description
Solar-Log GmbH是德国Solar-Log公司的一个用于监控光伏电站的数据记录器。 Solar-Log GmbH Base 15 6.0.1 Build 161固件版本存在跨站脚本漏洞，该漏洞源于允许攻击者利用 Web 门户中的switch group函数提升其权限。
CVSS Information
N/A
Vulnerability Type
N/A