漏洞分类 — 跨站脚本

英文名字
XSS
CVE ID：
79
漏洞详情：
跨站脚本，即Cross Site Script (通常简写为XSS)是指攻击者利用网站程序对用户输入过滤不足，输入可以显示在页面上对其他用户造成影响的HTML代码，从而盗取用户资料、利用用户身份进行某种动作或者对访问者进行病毒侵害的一种攻击方式。

相关漏洞

SSV ID 漏洞名称
SSV-18450 Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System
SSV-18442 Viscacha 0.8 Gold persistant XSS vulnerability
SSV-18427 Chipmunk Newsletter Persistant XSS Vulnerability
SSV-18426 Advanced Image Hosting v2.2 XSS
SSV-87537 Apache mod_proxy_ftp模块通过UTF7编码跨站漏洞
SSV-18400 Linux - chmod(/etc/shadow 0666) & exit() - 33 bytes
SSV-15024 Pligg多个跨站脚本和跨站请求伪造漏洞
SSV-18390 DPI 1.1-final Powered by Clixint XSS
SSV-18404 Joomla yt_color YOOOtheme XSS and Cookie Stealing
SSV-18401 Joomla 1.5.x com_joomgallery&func Incorrect Flood Filter
SSV-18399 Yoast GA 3.2.4 Plugin for WP XSS
SSV-15023 phpMyFAQ多个页面URL参数跨站脚本漏洞
SSV-15022 Firefox Yoono扩展DOM事件处理器跨域脚本执行漏洞
SSV-18391 2009 You! Hostit! XSS
SSV-18368 phpMyFAQ <= 2.5.4 Multiple XSS Vulnerabilities
SSV-18366 Huawei MT882 Modem/Router Multiple Vulnerabilities
SSV-15018 Firefox infoRSS扩展RSS源跨域脚本执行漏洞
SSV-18372 Component TP Whois for Joomla 1.5.x XSS
SSV-15021 mysql_error() XSS Vulnerability
SSV-18365 Kide Shoutbox v0.4.6 XSS & AXFR
SSV-15002 Apache Tomcat 404错误页跨站脚本漏洞
SSV-18350 XOOPS SmartMedia 0.85 Module XSS
SSV-18349 AdaptCMS Lite 1.5 Remote File Inclusion Vulnerability
SSV-18348 Sugar CRM 5.5.0.RC2 and 5.2.0j Multiple Remote Vulnerabilities
SSV-18382 PHP-Nuke <= 8.0 XSS & HTML Code Injection in News Module
SSV-14989 Vulnerabilities in WP-Cumulus for WordPress
SSV-18347 Micronet SP1910 Data Access Controller UI XSS & HTML Code Injection
SSV-14965 Opera Web出错消息跨站脚本漏洞
SSV-18383 OSI Codes PHP Live! Support v3.1 Remote File Inclusion Vulnerability
SSV-18304 PHP-Nuke <= 8.0 Downloads Module XSS
SSV-18279 Joomla 1.5.12 RCE via TinyMCE upload vulnerability
SSV-12663 CUPS kerberos参数跨站脚本漏洞
SSV-18268 Shoutbox 1.0 HTML / Xss Injection
SSV-18270 Xerver 4.31 4.32 HTTP Response Splitting
SSV-12646 IBM WebSphere应用服务器管理控制台跨站脚本漏洞
SSV-18276 Simplog v0.9.3.2 Mutliple Vulnerabilities
SSV-12645 phpMyFAQ搜索页面跨站脚本漏洞
SSV-18269 Arbitrary File Download in phpMyBackupPro
SSV-18275 PHD Help Desk v1.43 Mutliple XSS
SSV-18068 Alteon OS BBI (Nortell) - Multiple Vulnerabilities XSS XSRF
SSV-12630 McAfee Network Security Manager Login.jsp页面跨站脚本漏洞
SSV-12618 New cups packages fix cross-site scripting
SSV-12619 CUPS vulnerability
SSV-12589 Prototype JavaScript Framework跨站Ajax请求漏洞
SSV-14460 e-Courier CMS Tracking xss
SSV-14396 Whois Server v2 XSS
SSV-12546 Wowd search client multiple variable xss
SSV-18278 2wire Router <= 5.29.52 Remote DoS
SSV-14423 Mura CMS 5.1 xss
SSV-12519 网易163邮箱跨站挂马漏洞
SSV-14417 Wowd Search Client 1.3.0 XSS
SSV-14432 jetty 6.x - 7.x xss information disclosure injection
SSV-14401 TFTgallery .13 XSS
SSV-17994 jetty 6.x - 7.x xss information disclosure injection
SSV-18045 TwonkyMedia Server <=4.4.17 <=5.0.65 xss
SSV-14400 TwonkyMedia Server <=4.4.17 <=5.0.65 xss
SSV-12504 Websense Email Security Cross Site Scripting
SSV-14397 Websense Email Security xss
SSV-17997 OpenDocMan 1.2.5 xss SQL injection
SSV-14402 TBmnetCMS 1.0 xss
SSV-14445 Amiro.CMS <= 5.4.0.0 xss
SSV-14444 Barcode Generator 1d 2.0.1 xss
SSV-14436 Eclipse BIRT <= 2.2.1 xss
SSV-14414 Pentaho <= 1.7.0.1062 xss and information disclosure
SSV-14406 Snitz Forums 2000 3.4.07 xss
SSV-14450 Snitz Forums 2000 Multiple Cross-Site Scripting Vulnerabilities
SSV-14434 FreeSchool 1.1.0 xss
SSV-14368 OBOphiX 1.0 xss
SSV-14443 BlooFox CMS 0.3.5 xss
SSV-14447 AdaptBB 1.0 xss
SSV-14394 Zainu 1.0 xss
SSV-14448 Achievo <= 1.3.4 xss
SSV-14367 Dit.CMS 1.3 xss
SSV-14361 Simple Directory Listing 2.1_beta1 xss
SSV-12444 vBulletin - Multiple Versions - Cross Site Script Redirection
SSV-12425 PBBoard <=2.0.2 - XSS in Topic
SSV-18064 QuickCart 3.x xss xsrf Local File Inclusion Directory Traversal
SSV-14379 HP LaserJet printers - 存储型xss
SSV-14350 PBBoard 2.0.2 xss
SSV-14454 AfterLogic WebMail Pro 4.7.10 xss
SSV-14347 X-Cart email subscription xss
SSV-14348 CGI Helper 1.0 xss
SSV-12417 google apps googleapps.url.mailto:// uri handler cross-browser
SSV-14377 Hyperic HQ 3.2 - 4.2-beta1 Multiple XSS
SSV-12402 e107 Referer头跨站脚本漏洞
SSV-14492 e107 eCaptcha plugin 2.1 xss
SSV-14482 e107 0.7.16 Referer header xss
SSV-14341 Novell Edirectory 8.8 SP5 XSS
SSV-12374 IBM Tivoli Identity Manager SSUI跨站脚本漏洞
SSV-12358 IBM WebSphere Application Server Eclipse Help跨站脚本漏洞
SSV-18298 WX Guestbook 1.1.208 SQLi and persistent XSS
SSV-18299 Snort unified 1 IDS Logging Alert Evasion Logfile Corruption/Alert Falsify
SSV-12304 Horde跨站脚本和文件覆盖漏洞
SSV-14516 Neufbox NB4-R1.5.10-MAIN Persistent XSS Vulnerability
SSV-12235 Ruby on Rails表单帮助程序Unicode字符串处理跨站脚本漏洞
SSV-12242 IBM Lotus Domino Web Access跨站脚本漏洞
SSV-12220 X-Stat存在跨站脚本执行(CSS/XSS)漏洞
SSV-12213 ZeroForum图象标记跨站脚本执行漏洞
SSV-12149 SquirrelMail多个表单跨站请求伪造漏洞
SSV-12121 CA SiteMinder GET请求多个跨站脚本漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English