Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Multiple vulnerabilities in WinNMP from Wtriple
Vulnerability Description
A vulnerability had been discovered in WinNMP 19.02 consisting of an XSS attack via /tools/redis.php page in the k, hash, key and p parameters. This vulnerability could allow a remote user to submit a specially crafted JavaScript payload for an authenticated user to retrieve their session details.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
WinNMP 跨站脚本漏洞
Vulnerability Description
WinNMP是WinNMP的一个用于快速搭建开发服务器的软件包。 WinNMP 19.02版本存在跨站脚本漏洞，该漏洞源于容易受到跨站脚本（XSS）攻击，从而导致攻击者可通过提交特制的JavaScript有效载荷检索会话详细信息。
CVSS Information
N/A
Vulnerability Type
N/A