CVE-2006-4874

ملخص

ثغرات متعددة من نوع البرمجة النصية عبر المواقع (XSS) في Jupiter CMS تسمح للمهاجمين عن بُعد بحقن نصوص برمجية أو HTML عشوائية عبر المعاملات (1) language[Admin name] و(2) language[Admin back] في (a) modules/blocks.php؛ والمعاملات (3) language[Register title] و(4) language[Register title2] في (b) modules/register.php؛ والمعاملات (5) language[Mass-Email form title] و(6) language[Mass-Email form desc] و(7) language[Mass-Email form desc2] و(8) language[Mass-Email form desc3] و(9) language[Mass-Email form desc4] في (c) modules/mass-email.php؛ والمعاملات (10) language[Forgotten title] و(11) language[Forgotten desc] و(12) language[Forgotten desc2] و(13) language[Forgotten desc3] و(14) language[Forgotten desc4] و(15) language[Forgotten desc5] في (d) modules/register.php؛ والمعاملات (16) language[Search view desc] و(17) language[Search view desc2] و(18) language[Search view desc3] و(19) language[Search view desc4] و(20) language[Search view desc5] و(21) language[Search view desc6] و(22) language[Search view desc7] و(23) language[Search view desc8] في (e) modules/search.php.

• Jupiter CMS 1.1.4/1.1.5 - '/modules/blocks.php' Multiple Cross-Site Scripting Vulnerabilitiesاستغلال

  HACKERS PAL · php · 15‏/09‏/2006

• Jupiter CMS 1.1.4/1.1.5 - '/modules/register.php' Multiple Cross-Site Scripting Vulnerabilities