漏洞分类 — 跨站脚本

英文名字
XSS
CVE ID：
79
漏洞详情：
跨站脚本，即Cross Site Script (通常简写为XSS)是指攻击者利用网站程序对用户输入过滤不足，输入可以显示在页面上对其他用户造成影响的HTML代码，从而盗取用户资料、利用用户身份进行某种动作或者对访问者进行病毒侵害的一种攻击方式。

相关漏洞

SSV ID 漏洞名称
SSV-12096 Huawei SmartAX MT880 Multiple XSRF Vulnerabilities
SSV-12090 Adobe Flex开发包index.template.html页面跨站脚本漏洞
SSV-14640 Vtiger CRM 5.0.4 (RCE/CSRF/LFI/XSS) Multiple Vulnerabilities
SSV-12037 华为SmartAX MT880跨站请求伪造漏洞
SSV-14684 PHP Script Forum Hoster (Topic Delete/XSS) Multiple Vulnerabilities
SSV-11955 CMSphp 0.21 (LFI/XSS) Multiple Remote Vulnerabilities
SSV-11921 Google Chrome 'chrome://history/' URI跨站脚本漏洞
SSV-11873 WordPress 'wp-comments-post.php'跨站脚本漏洞
SSV-11882 Hitachi多个Business Logic产品未明跨站脚本漏洞
SSV-11860 WordPress Comment Author URI跨站脚本漏洞
SSV-11824 wordpress 281评论显示xss漏洞
SSV-14811 Good/Bad Vote (XSS/LFI) Multiple Remote Vulnerabilities
SSV-11768 Horde Passwd模块backend参数跨站脚本漏洞
SSV-11770 IPplan grp参数跨站脚本漏洞
SSV-11759 FCKeditor connectors模块多个跨站脚本及目录遍历漏洞
SSV-14356 HP Multiple LasterJet Printer xss
SSV-11748 phpMyAdmin 'db'参数跨站脚本漏洞
SSV-11720 Movable Type跨站脚本和安全绕过漏洞
SSV-14929 Tribiq CMS 5.0.12c (XSS/LFI) Multiple Remote Vulnerabilities
SSV-14928 PHPEcho CMS 2.0-rc3 (forum) XSS Cookie Stealing / Blind Vulnerability
SSV-11685 Kasseler CMS (FD/XSS) Multiple Remote Vulnerabilities
SSV-14944 Elgg (XSS/CSRF/Change Password) Multiple Remote Vulnerabilities
SSV-11666 Discuz!NT论坛多个文件变量过滤不严导致XSS攻击
SSV-11663 CMS Buzz (XSS/PC/HI) Multiple Remote Vulnerabilities
SSV-11619 Z-Blog 1.8 Arwen Build 81206 catalog.asp 存在跨站漏洞
SSV-12934 The Recipe Script 5 Remote XSS Vulnerability
SSV-11618 Z-BLOG V1.8 c_error.asp跨站漏洞
SSV-12912 4images <= 1.7.7 Filter Bypass HTML Injection/XSS Vulnerability
SSV-11540 IronPort AsyncOS垃圾邮件隔离功能登录页面跨站脚本漏洞
SSV-17982 PropertyMax Pro FREE (SQL/XSS) Multiple Remote Vulnerabilities
SSV-11502 Lussumo Vanilla ajax/updatecheck.php模块跨站脚本漏洞
SSV-11479 动网论坛(DVBBS)usersms.asp页面过滤不严导致跨站漏洞
SSV-17965 Small Pirate v-2.1 (XSS/SQL) Multiple Remote Vulnerabilities
SSV-17966 AMember 3.1.7 (XSS/SQL/HI) Multiple Remote Vulnerabilities
SSV-11456 动网论坛(DVBBS)Favlist.asp页面过滤不严导致跨站漏洞
SSV-11464 动网论坛(DVBBS)Smiley.asp页面过滤不严导致跨站漏洞
SSV-11473 AdPeeps 8.5d1 XSS and HTML Injection Vulnerabilities
SSV-11431 动网论坛(DVBBS)Boardhelp.asp页面过滤不严导致跨站漏洞
SSV-11413 动网论坛(DVBBS)Show.asp页面过滤不严导致跨站漏洞
SSV-11376 Catviz 0.4.0b1 (LFI/XSS) Multiple Remote Vulnerabilities
SSV-11360 金山网盾远程代码执行漏洞
SSV-11370 OpenBB跨站脚本执行(CSS/XSS)漏洞
SSV-11349 KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability
SSV-11373 OpenBB Image标记跨站脚本执行(CSS/XSS)漏洞
SSV-11321 FormMail HTTP响应拆分和跨站脚本漏洞
SSV-17954 my-colex 1.4.2 (AB/XSS/SQL) Multiple Remote Vulnerabilities
SSV-17955 my-Gesuad 0.9.14 (AB/SQL/XSS) Multiple Remote Vulnerabilities
SSV-17951 2daybiz Custom T-shirt Design (SQL/XSS) Multiple Remote Vulns
SSV-11237 PJBlog个人博客系统Getarticle.asp页面存在跨站脚本攻击漏洞
SSV-11236 PJBlog个人博客系统Action.asp页面跨站脚本攻击漏洞
SSV-11211 Merak邮件服务器RSS源阅读器跨站脚本漏洞
SSV-11106 Invision Power Board 3.0.0b5 Active XSS & Path Disclosure Vulns
SSV-11109 DEW-NEWphpLinks 2.0 (LFI/XSS) Multiple Remote Vulnerabilities
SSV-5098 Discuz <=7.0(frame.php) xss Vulnerability
SSV-5092 Google XSS
SSV-11035 webSPELL 4.2.0c Bypass BBCode XSS Cookie Stealing Vulnerability
SSV-17901 AbleSpace 1.0 (XSS/BSQL) Multiple Remote Vulnerabilities
SSV-11004 ASP Product Catalog 1.0 (XSS/DD) Multiple Remote Exploits
SSV-10974 moziloCMS 1.11 (LFI/PD/XSS) Multiple Remote Vulnerabilities
SSV-10925 Sun Calendar Express Web Server (DoS/XSS) Multiple Remote Vulns
SSV-4965 sablog2.0 query.inc.php 跨站漏洞
SSV-10898 Arcadwy Arcade Script (username) Static XSS Vulnerability
SSV-10891 IncrediMail 5.86 (XSS) Script Execution Exploit
SSV-10863 Rittal CMC-TC Processing Unit II Multiple Vulnerabilities
SSV-4947 Bo-blogV2.1.0 跨站漏洞
SSV-10818 BLOG:CMS Cross-Site Scripting vulnerability
SSV-10805 Joomla Djice Shoutbox 1.0 Permanent XSS Vulnerability
SSV-10804 Wordpress MU < 2.7 'HOST' HTTP Header XSS Vulnerability
SSV-17874 NovaBoard <= 1.0.1 (message) Persistent XSS Vulnerability
SSV-10761 RitsBlog 0.4.2 (AB/XSS) Multiple Remote Vulnerabilities
SSV-10714 Optus/Huawei E960 HSDPA Router SMS XSS Attack
SSV-17853 NovaBoard 1.0.0 Multiple Remote Vulnerabilities
SSV-17854 MemHT Portal <= 4.0.1 (pvtmsg) Delete All Private Messages Exploit
SSV-10642 InselPhoto 1.1 Persistent XSS Vulnerability
SSV-17852 PowerMovieList 0.14b (SQL/XSS) Multiple Remote Vulnerabilities
SSV-17849 Graugon Gallery 1.0 (XSS/SQL/Cookie Bypass) Remote Vulnerabilities
SSV-10594 ZeroBoardXE 1.1.5 (09.01.22) XSS Vulnerability
SSV-10575 Kipper 2.01 (XSS/LFI/DD) Multiple Vulnerabilities
SSV-4718 Cisco IOS XSS/CSRF Vulnerability
SSV-17828 Power System Of Article Management (DD/XSS) Vulnerabilities
SSV-17829 Team 1.x (DD/XSS) Multiple Remote Vulnerabilities
SSV-10529 D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite
SSV-10528 Profense Web Application Firewall 2.6.2 XSRF/XSS Vulnerabilities
SSV-17813 Flatnux 2009-01-27 (Job fields) XSS/Iframe Injection PoC
SSV-17814 AJA Portal 1.2 Local File Inclusion Vulnerabilities (win)
SSV-10526 Motorola Wimax modem CPEi300 (FD/XSS) Multiple Vulnerabilities
SSV-10527 ManageEngine Firewall Analyzer 5 XSRF/XSS Vulnerability
SSV-10517 AXIS 70U Network Document Server Privilege Escalation/XSS
SSV-17807 ReVou Twitter Clone (XSS/SQL) Multiple Remote Vulnerabilities
SSV-17810 Orca 2.0.2 (Topic) Remote XSS Vulnerability
SSV-17809 BPAutoSales 1.0.1 (XSS/SQL) Multiple Remote Vulnerabilities
SSV-17793 Gazelle CMS (template) Local File Inclusion Vulnerability
SSV-17791 GameScript 4.6 (XSS/SQL/LFI) Multiple Remote Vulnerabilities
SSV-17792 Chipmunk Blog (Auth Bypass) Add Admin Exploit
SSV-17773 Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln
SSV-17763 Joomla Component beamospetition 1.0.12 SQL Injection / XSS
SSV-17752 PHPAds 2.0 Multiple Remote Vulnerabilities
SSV-4675 baidu url xss
SSV-17749 Gallery Kys 1.0 Admin Password Disclosure / Permanent XSS Vulns
SSV-17751 Ninja Blog 4.8 Remote Information Disclosure Vulnerability
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English