Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross Site Scripting vulnerability in Gibbon before v.27.0.01 and fixed in v.28.0.00 allows a remote attacker to obtain sensitive information via the email parameter found in /Gibbon/modules/User Admin/user_manage_editProcess.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gibbon 跨站脚本漏洞
Vulnerability Description
Gibbon是Gibbon团队的一个解决教育工作者每天遇到的实际问题的学校平台。 Gibbon 27.0.01之前版本存在跨站脚本漏洞，该漏洞源于远程攻击者可以通过/Gibbon/modules/UserAdmin/user_manage_editProcess.php中的email参数获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A