关键信息摘要 漏洞名称: Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) & Remote Command Execution (RCE) ID和分类: - EDB-ID: 51074 - CVE: N/A - type: Webapps (Web应用程序) - Platform: PHP 发布信息: - Author: Rafael Pedrero - Date: 2023-03-27 漏洞描述: - Exist in Webgrind version 1.1 and prior due to insufficient encoding of user-controlled inputs in the file's parameter. This leads to both Cross-Site Scripting (XSS) and Remote Command Execution (RCE). - CVSS Scores: - RCE: v3 score 9.8, vector - XSS: v3 score 6.5, vector - CWE Classification: CWE-434 for RCE, CWE-79 for XSS. 测试环境和利用: - Tested on Windows 10 using XAMPP with PHP. - Proof of concept code provided for both XSS and RCE attacks. 参考资料 - Vendor and software on GitHub respectively at http://github.com/jokkedk/webgrind - Advisory/Source Link provided.