Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cross site scripting vulnerability in AREAL SAS Webserv1 ASP Web Site
Vulnerability Description
A cross site scripting vulnerability in the AREAL SAS Websrv1 ASP website allows a remote low-privileged attacker to gain escalated privileges of other non-admin users.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
AREAL Topkapi 跨站脚本漏洞
Vulnerability Description
AREAL Topkapi是法国AREAL公司的一个多部门解决方案，是一个创新的软件平台，提供的功能远远超出 SCADA 软件的传统功能。 AREAL Topkapi存在跨站脚本漏洞，该漏洞源于存在 Websrv1 组件存在跨站脚本漏洞，允许远程低权限攻击者获得其他非管理员用户的升级权限。
CVSS Information
N/A
Vulnerability Type
N/A