Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Multiple vulnerabilities in WinNMP from Wtriple
Vulnerability Description
A vulnerability had been discovered in WinNMP 19.02 consisting of an XSS attack via index page in from, subject, text and hash parameters. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their session details.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
WinNMP 跨站脚本漏洞
Vulnerability Description
WinNMP是WinNMP的一个用于快速搭建开发服务器的软件包。 WinNMP 19.02版本存在跨站脚本漏洞，该漏洞源于容易受到跨站脚本（XSS）攻击，从而允许攻击者向经过身份验证的用户发送特制查询并窃取其会话详细信息。
CVSS Information
N/A
Vulnerability Type
N/A