| शीर्षक | Seeyon Zhiyuan OA Web Application System V8.1 SP2 Cross Site Scripting |
|---|
| विवरण | 1.Vulnerability Name : Seeyon Zhiyuan OA Web Application System V8.1 SP2 has an XSS vulnerability
2.Vulnerability level : Medium
3.Bug submitter and contributor: 蔡超雄（caichaoxiong）
4.Affected product version : V8.1 SP2
5.Vulnerability location : ssoproxy.jsp
6.Vulnerability Description:
The ssoproxy.jsp product function of Seeyon Zhiyuan OA Web Application System V8.1 SP2 does not perform security checks and filtering on the name parameter. Attackers can carefully design and control the parameter, resulting in a reflected XSS vulnerability. Other attack methods can be configured to conduct deep penetration attacks and control the target server. |
|---|
| स्रोत | ⚠️ https://wx.mail.qq.com/s?k=g1PB2UUAekANSMkHzr |
|---|
| उपयोगकर्ता | caichaoxiong (UID 84060) |
|---|
| सबमिशन | 15/04/2025 08:05 AM (1 वर्ष पहले) |
|---|
| संयम | 26/04/2025 10:24 AM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 306336 [Seeyon Zhiyuan OA Web Application System 8.1 SP2 ssoproxy.jsp नाम क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|