漏洞分类 — 跨站脚本

英文名字
XSS
CVE ID：
79
漏洞详情：
跨站脚本，即Cross Site Script (通常简写为XSS)是指攻击者利用网站程序对用户输入过滤不足，输入可以显示在页面上对其他用户造成影响的HTML代码，从而盗取用户资料、利用用户身份进行某种动作或者对访问者进行病毒侵害的一种攻击方式。

相关漏洞

SSV ID 漏洞名称
SSV-87747 php 5.1.2 跨站脚本
SSV-15136 XSS Vulnerability in JpGraph 3.0.6
SSV-87772 apache Jackrabbit 1.5 跨站脚本漏洞
SSV-87744 apache mod_status 2.2.4 mod-status.c 跨站脚本漏洞
SSV-15134 cPanel fileop参数跨站脚本漏洞
SSV-87734 apache mod-imagemap 2.2.6 跨站脚本漏洞
SSV-15130 Horde应用框架管理界面PHP_SELF参数跨站脚本漏洞
SSV-18683 webMathematica XSS Vulnerability
SSV-18675 MyBB v1.4.10 - myps plugin XSS Vulnerability
SSV-87736 apache 2.2.7 跨站脚本漏洞
SSV-87740 apache mod-proxy-balancer 2.2.6 跨站脚本漏洞
SSV-18669 Traffic Exchange Script v1.1 XSS Vulnerability
SSV-87724 apache mod-deflate 2.2.11 拒绝服务漏洞
SSV-87738 apache 2.2.6 跨站脚本漏洞
SSV-87728 apache mod-proxy-balancer 2.2.6 跨站脚本漏洞
SSV-87684 resin 3.1.1 跨站脚本漏洞
SSV-15124 Xss Discuz! version 5.0.0 RC1
SSV-18661 paFileDB 3.1 XSS Redirect Vulnerability
SSV-87678 WebSphere 7.0.0.7 Eclipse帮助导致XSS漏洞
SSV-15119 SMF (Simple Machine Forum) 1.1.11 XSS Vulnerabilities
SSV-87693 WebSphere 6.1.0.23 管理员控制台跨站脚本漏洞
SSV-87677 phpMyAdmin 2.6.1 及之前版本存在多个XSS跨站漏洞
SSV-87657 phpMyAdmin 2.6.2 convcharset参数存在XSS漏洞
SSV-87675 PHP 4.4.3 Transparent会话ID跨站脚本执行漏洞
SSV-18639 Kasseler CMS 1.3.4 Lite XSS Vulnerability
SSV-87634 WebSphere 6.0.2.7 SOAP服务错误页面导致XSS漏洞
SSV-18629 PacketFence Network Access Controller XSS vulnerability
SSV-18613 Barracuda Web Firewall 660 Firmware v7.3.1.007 Vulnerability
SSV-18612 Redmine <= 0.8.7 UTF-7 XSS Vulnerability
SSV-87620 WebLogic 8.1 SP3版本之前存在多个安全漏洞
SSV-87623 WebSphere 6.1 跨站脚本漏洞
SSV-87606 zope 2.6.1 html 注入漏洞
SSV-87614 WebSphere 3.0.2.1 跨站脚本漏洞
SSV-87617 Microsoft IIS 5.1 重定向错误页面跨站脚本执行漏洞
SSV-15109 VMware vCenter Lab Manager WebWorks Help跨站脚本漏洞
SSV-87610 zope 2.7.0 多漏洞导致跨站脚本漏洞
SSV-15108 PHP 'htmlspecialcharacters()'畸形多字节字符跨站脚本漏洞
SSV-87584 zeus 4.2 服务器管理接口XSS漏洞
SSV-87616 Microsoft IIS 5.0 IDC扩展XSS
SSV-15103 Daloradius XSS Vulnerability
SSV-15097 Ruby on Rails 'protect_from_forgery'跨站脚本请求伪造漏洞
SSV-87570 phpMyAdmin2.6.4之前版本存在多个XSS漏洞
SSV-18578 Basic PHP Events Lister 2 Add Admin Exploit
SSV-18577 dblog (dblog.mdb) Remote Database Disclosure Vulnerability
SSV-18576 Authentication bypass and file manipulation in Sitecore Staging Module 5.4.0
SSV-18575 Horde 3.3.5 ""PHP_SELF"" XSS vulnerability
SSV-18581 ReVou Micro Blogging XSS
SSV-18572 MOJO's IWMS Login page XSS and Cookies Manipulation
SSV-18573 Cisco ASA <= 8.x VPN SSL module Clientless URL-list control bypass
SSV-18582 Cpanel 11 Xss
SSV-18588 Pre Jobo .NET SQL Bypass
SSV-87581 Microsoft IIS 5.0 Form_JScript.asp 跨站脚本漏洞
SSV-18587 Pre MultiVendor E-commerce Solution XSS
SSV-18570 Pluxml-Blog B鳡 4.2 XSS Vulnerability
SSV-18574 PHP F1 Upload Shell Upload Vulnerability
SSV-18550 Drupal Sections Module XSS Vulnerability
SSV-87547 Tomcat自带示例hello.jsp存在XSS跨站脚本漏洞
SSV-87545 Tomcat 5.5.15 cal2.jsp 跨站脚本漏洞
SSV-87549 Tomcat snoop.jsp存在跨站脚本漏洞
SSV-18555 iDevCart 1.09 XSS Vulnerability
SSV-87548 Tomcat4 SendMailServlet sendmail.jsp存在XSS跨站漏洞
SSV-18551 Drupal 6.14 with Sections 6.x-1.2 multiple XSS
SSV-18564 eUploader PRO 3.1.1 (XSRF/XSS) Multiple Vulnerabilities
SSV-18542 IP Address Finder XSS Vulnerability
SSV-18537 Smart Statistics XSS Vulnerability
SSV-87543 Tomcat 自带cal2.jsp示例存在XSS跨站脚本漏洞
SSV-18543 iSupport <= 1.8 XSS/LFI Exploit
SSV-18534 Harold Bakker's NewsScript 1.3 XSS Vulnerability
SSV-18538 Recipe Script v5.0 Shell Upload/XSRF/XSS Multiple Vulnerabilities
SSV-18561 PhpLinkExchange v1.02 - XSS/Upload Vulerability
SSV-15074 Cross-Site Scripting vulnerabilities in Invision Power Board
SSV-15073 IBM InfoSphere Information Server存在缓冲区溢出和跨站脚本漏洞
SSV-18532 GalleryPal FE v1.5(Auth Bypass)
SSV-18528 Ez Blog v1.0 (XSS/XSRF) Multiple Vulnerabilities
SSV-18529 Ez Cart v1.0 Multiple XSRF Vulnerabilities
SSV-15076 WX Guest Book 1.1.208 (SQL/XSS) Multiple Remote Vulnerabilities
SSV-87510 Microsoft IIS HTTP错误页面导致跨站脚本执行漏洞
SSV-15066 Barracuda IM Firewall smtp_test.cgi脚本跨站脚本执行漏洞
SSV-18513 phpFaber CMS - XSS Vulnerability
SSV-18514 mini Hosting Panel XSRF Change Admin Settings
SSV-18510 Ez Poll Hoster Multiple XSS and XSRF Vulnerabilities
SSV-15064 JBoss企业应用平台多个安全漏洞
SSV-18515 Tender System 0.9.5b LFI
SSV-18482 Uploadscript v1.0. Multiple Vulnerabilities
SSV-18479 Acc Auto Dealer Script v5.0 Persistent XSS and SQL Backup
SSV-18483 Interspire Shopping Cart Full Path Disclosure
SSV-18484 Ez Cart XSS
SSV-18490 Real Estate Manager 1.0.1 - XSS
SSV-18485 AccStatistics v1.1 XSRF Vulnerability (Change Admin Settings)
SSV-18492 Piwigo v2.0.6 Multiple Vulnerabilities
SSV-18478 Million Pixel Script XSS
SSV-18487 Automne.ws CMS 4.0.0rc2 XSS
SSV-18481 ArticleMS v2.0 XSS Vulnerability
SSV-18476 Flash Video E-Cards XSS Vulnerability
SSV-18477 ZeeCareers v2x - PHP HR Manager Website [ XSS / Auth Bypass ]
SSV-18467 Model Agency Manager XSS
SSV-18464 oBlog Persistant XSS CSRF Admin Bruteforce
SSV-18466 ZeeJobsite v3x - PHP Job Portal XSS Attack Vulnerability
SSV-18469 The Next Generation of Genealogy Sitebuilding XSS
SSV-18488 phpldapadmin Local File Inclusion
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English