NetWin DBabble 2.5 i – Cross-Site Scripting-安全小百科

NetWin DBabble 2.5 i – Cross-Site Scripting

漏洞ID	1054170	漏洞类型
发布时间	2003-09-16	更新时间	2003-09-16
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	CGI	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/23153

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/8637/info

A cross-site scripting problem has been reported in NetWin DBabble. This could make it possible for an attacker to potentially execute code in the security context of a site using the vulnerable software. This could be exploited by enticing a user to follow a malicious link to a site hosting the software. 

http://www.example.com/dbabble?cmd="><evil_script>

相关推荐: Solaris 2.5.1 lp / lpsched – Symlink

Solaris 2.5.1 lp / lpsched – Symlink 漏洞ID 1053346 漏洞类型发布时间 1997-05-03 更新时间 1997-05-03 CVE编号 N/A CNNVD-ID N/A 漏洞平台 Solaris CVSS评分 …

文章版权归作者所有，未经允许请勿转载。

THE END