PHPReactor 1.2.7 pl1 – ‘browse.php’ Cross-Site Scripting

PHPReactor 1.2.7 pl1 – ‘browse.php’ Cross-Site Scripting

漏洞ID 1053630 漏洞类型
发布时间 2002-10-10 更新时间 2002-10-10
图片[1]-PHPReactor 1.2.7 pl1 – ‘browse.php’ Cross-Site Scripting-安全小百科CVE编号 N/A
图片[2]-PHPReactor 1.2.7 pl1 – ‘browse.php’ Cross-Site Scripting-安全小百科CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/21930
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/5939/info

php(Reactor) is prone to cross-site scripting attacks.

An attacker may create a malicious link to a php(Reactor) site which contains malicious HTML and script code. If this link is visited by a web user, the attacker-supplied code will execute in their web client, in the security context of the php(Reactor) site.

This may allow for theft of cookie-based authentication credentials from legitimate authenticated users. Other attacks are also possible.

This issue has been reported in php(Reactor) version 1.2.7pl1. Other versions may also be affected.

http://www.example.com/forums/browse.php?fid=3&tid=46&go=<script>JavaScript:alert('test');</script>

相关推荐: Guessable magic cookies 通过xterm执行命令漏洞

Guessable magic cookies 通过xterm执行命令漏洞 漏洞ID 1207674 漏洞类型 未知 发布时间 1995-11-01 更新时间 1995-11-01 CVE编号 CVE-1999-0241 CNNVD-ID CNNVD-1995…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享