| शीर्षक | ForUCMS XSS vulnerability |
|---|
| विवरण | Construction environment:
windows10
Phpstudy
5.3.29
Project download address: https://gitee.com/sw1981/ForU-CMS?_from=gitee_search
Vulnerability File Directory
C:\phpStudy\PHPTutorial\WWW\ForU-CMS-dev\admin\cms_chip.php
POST receives data transmitted by users
However, the process does not filter the xss attack payload input by the user
c_ name value
<img src="x" onerror="alert(/xss/);">
Reference link：https://github.com/whiex/c2Rhc2Rhc2Q-/blob/main/MjU1NTI1ODU4ODU%3D.docx |
|---|
| स्रोत | ⚠️ https://github.com/whiex/c2Rhc2Rhc2Q-/blob/main/MjU1NTI1ODU4ODU%3D.docx |
|---|
| उपयोगकर्ता | s7eyd7 (UID 30723) |
|---|
| सबमिशन | 08/11/2022 03:53 AM (4 साल पहले) |
|---|
| संयम | 11/11/2022 08:29 AM (3 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 213450 [ForU CMS cms_chip.php name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|