漏洞分类 — 跨站脚本

英文名字
XSS
CVE ID：
79
漏洞详情：
跨站脚本，即Cross Site Script (通常简写为XSS)是指攻击者利用网站程序对用户输入过滤不足，输入可以显示在页面上对其他用户造成影响的HTML代码，从而盗取用户资料、利用用户身份进行某种动作或者对访问者进行病毒侵害的一种攻击方式。

相关漏洞

SSV ID 漏洞名称
SSV-17750 RCBlog v1.03 Authentication Bypass Vulnerability
SSV-17729 RankEm (DD/XSS/CM) Multiple Remote Vulnerabilities
SSV-17730 BlogIt! (SQL/DD/XSS) Multiple Remote Vulnerabilities
SSV-17704 Netvolution CMS 1.0 (XSS/SQL) Multiple Remote Vulnerabilities
SSV-4643 CSDN Blog 文章评论处 XSS Bug
SSV-10430 CuteNews <= 1.4.6 (ip ban) XSS/Command Execution Exploit (adm req.)
SSV-4642 CSDN Blog XSS Bug
SSV-17690 PHPAuctionSystem Multiple Remote File Inclusion Vulnerabilities
SSV-10367 Konqueror <= 4.1 XSS / Remote Crash Vulnerabilities
SSV-10293 chicomas <= 2.0.4 (DB Backup/DD/XSS) Multiple Vulnerabilities
SSV-10298 PHPg 1.6 (XSS/PD/DoS) Multiple Remote Vulnerabilities
SSV-10287 myPHPscripts Login Session 2.0 XSS/Database Disclosure Vulns
SSV-17648 RSMScript 1.21 XSS/Insecure Cookie Handling Vulnerabilities
SSV-17650 K&S Shopsysteme Arbitrary Remote File Upload Vulnerability
SSV-17649 BP Blog 6.0/7.0/8.0/9.0 Remote Database Disclosure Vulnerability
SSV-17629 CodeAvalanche FreeWallpaper Remote Database Disclosure Vulnerability
SSV-17628 CodeAvalanche FreeForAll (CAFFAPage.mdb) Database Disclosure Vuln
SSV-17626 Forest Blog 1.3.2 (blog.mdb) Remote Database Disclosure Vulnerability
SSV-17630 CodeAvalanche Articles (CAArticles.mdb) Database Disclosure Vuln
SSV-10249 PHP Weather 2.2.2 (LFI/XSS) Multiple Remote Vulnerabilities
SSV-17632 eZ Publish < 3.9.5/3.10.1/4.0.1 (token) Privilege Escalation Exploit
SSV-17631 CodeAvalanche RateMySite (CARateMySite.mdb) Database Disclosure
SSV-17627 CodeAvalanche Directory (CADirectory.mdb) Database Disclosure Vuln
SSV-4562 开心网(kaixin001.com) 好友点歌XSS漏洞
SSV-10224 Living Local 1.1 (XSS-RFU) Multiple Remote Vulnerabilities
SSV-10225 Pro Chat Rooms 3.0.2 (XSS/CSRF) Multiple Vulnerabilities
SSV-17600 Pro Chat Rooms 3.0.2 (XSS/CSRF) Multiple Vulnerabilities
SSV-10217 PHP Multiple Newsletters 2.7 (LFI/XSS) Multiple Vulnerabilities
SSV-17592 Tizag Countdown Creator .v.3 Insecure Upload Vulnerability
SSV-17590 Merlix Teamworx Server (DD/Bypass) Multiple Remote Vulns
SSV-4520 Discuz! 1_modcp_editpost.tpl.php xss bug
SSV-17589 NightFall Personal Diary 1.0 (XSS/DD) Multiple Remote Vulnerabilities
SSV-17591 Cold BBS (cforum.mdb) Remote Database Disclosure Vulnerability
SSV-17575 Ocean12 Mailing List Manager Gold (DD/SQL/XSS) Vulnerabilities
SSV-17576 CMS MAXSITE Component Guestbook Remote Command Execution Exploit
SSV-4513 Yahoo webmail xss&OWA xss
SSV-10123 Comersus ASP Shopping Cart (DD/XSS) Multiple Remote Vulnerabilities
SSV-17547 Ocean12 Calendar Manager Gold Database Disclosure Vulnerability
SSV-10108 Discuz! 6.1 xss2webshell Exploit
SSV-17540 Chipmunk Topsites (Auth Bypass/XSS) Multiple Remote Vulnerabilities
SSV-17541 FAQ Manager 1.2 (config_path) Remote File Inclusion Vulnerability
SSV-17537 Bandwebsite 1.5 (SQL/XSS) Multiple Remote Vulnerabilities
SSV-17536 FTPzik (XSS/LFI) Multiple Remote Vulnerabilities
SSV-10072 vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit
SSV-9999 Collabtive 0.4.8 (XSS/Auth Bypass/Upload) Multiple Vulnerabilities
SSV-17493 Openfire Server <= 3.6.0a (Auth Bypass/SQL/XSS) Multiple Vulnerabilities
SSV-9986 zeeproperty 1.0 (Upload/XSS) Multiple Remote Vulnerabilities
SSV-17485 turnkeyforms Entertainment Portal 2.0 Insecure Cookie Handling Vuln
SSV-17484 Prozilla Software Directory (XSS/SQL) Multiple Vulnerabilities
SSV-17480 Pre ADS Portal <= 2.0 (Auth Bypass/XSS) Multiple Vulnerabilities
SSV-4399 Discuz! member.php xss漏洞
SSV-4389 Discuz! admincp.php xss bug
SSV-4393 Discuz! 数据库错误信息xss bug
SSV-9912 Apartment Search Script (RFU/XSS) Multiple Remote Vulnerabilities
SSV-9895 A-Link WL54AP3 and WL54AP2 CSRF+XSS Vulnerability
SSV-4353 Discuz!/phpwind flash标签的xss
SSV-4354 Discuz 6.X [flash] xss bug
SSV-4317 Xoops个人消息系统跨站脚本执行(CSS/XSS)漏洞
SSV-9788 WebSVN <= 2.0 (XSS/FH/CE) Multiple Remote Vulnerabilities
SSV-9787 miniPortail <= 2.2 (XSS/LFI) Remote Vulnerabilities
SSV-9769 Wysi Wiki Wyg 1.0 (LFI/XSS/PHPInfo) Remote Vulnerabilities
SSV-17412 Camera Life 2.6.2b4 (SQL/XSS) Multiple Remote Vulnerabilities
SSV-4127 Blogcn.com存在多处跨站漏洞
SSV-4124 多款RSS阅读器出现XSS漏洞
SSV-17370 LanSuite 3.3.2 (fckeditor) Arbitrary File Upload Exploit
SSV-17369 Atomic Photo Album 1.1.0pre4 (XSS/SQL) Remote Vulnerabilities
SSV-9536 Explay CMS <= 2.1 Persistent XSS and CSRF Vulnerability
SSV-9471 PhpWebGallery 1.3.4 (XSS/LFI) Multiple Vulnerabilities
SSV-3993 Mirosoft Internet Explorer 8 XSS过滤器绕过漏洞
SSV-3939 Blogbus存在多处跨站漏洞
SSV-9378 Multiple Cross-Site Scripting Vulnerabilities in DedeCms v5.x
SSV-9369 CMME 1.12 (LFI/XSS/CSRF/Backup/MkDir) Multiple Vulnerabilities
SSV-17319 CMME 1.12 (LFI/XSS/CSRF/Backup/MkDir) Multiple Vulnerabilities
SSV-3897 vBulletin '$newpm[title]' 跨站漏洞
SSV-9339 BandSite CMS 1.1.4 (Download Backup/XSS/CSRF) Remote Vulnerabilities
SSV-9316 XSS Private Messagging On PhpBB3(0day)
SSV-9271 Ppim <= 1.0 (Arbitrary File Delete/XSS) Multiple Vulnerabilities
SSV-3806 Bo-blog跨站漏洞
SSV-9255 Quate CMS 0.3.4 footer.php/header.php(LFI/XSS) Multiple Remote Vulnerabilities
SSV-17313 Quate CMS 0.3.4 (XSS) Remote Vulnerabilities
SSV-17304 ContentNow 1.4.1 (Upload/XSS) Multiple Remote Vulnerabilities
SSV-8914 Kasseler CMS 1.3.0 (LFI/XSS) Multiple Vulnerabilities
SSV-17303 fuzzylime cms 3.01 Remote Command Execution Exploit
SSV-8869 PowerAward 1.1.0 RC1 (LFI /XSS) Multiple Remote Vulnerabilities
SSV-8864 OTManager CMS 24a (LFI/XSS) Multiple Remote Vulnerabilities
SSV-8830 MM Chat 1.5 目录遍历漏洞
SSV-8829 TinX CMS 1.1 (LFI/XSS) Multiple Remote Vulnerabilities
SSV-17295 MyBlog: PHP and MySQL Blog/CMS software (SQL/XSS) Vulnerabilities
SSV-8816 CMReams CMS 1.3.1.1 Beta2 (LFI/XSS) Multiple Remote Vulnerabilities
SSV-8788 JaxUltraBB <= 2.0 (LFI/XSS) Multiple Remote Vulnerabilities
SSV-17287 SiteXS CMS 0.1.1 (Upload/XSS) Multiple Remote Vulnerabilities
SSV-8758 Traindepot 0.1 (LFI/XSS) Multiple Remote Vulnerabilities
SSV-17283 doITlive CMS <= 2.50 (SQL Injection/XSS) Multiple Vulnerabilities
SSV-8706 Syndeo CMS 2.6.0 (LFI/XSS) Multiple Remote Vulnerabilities
SSV-8683 PHPInv 0.8.0 (LFI/XSS) Multiple Remote Vulnerabilities
SSV-8493 Mantis Bug Tracker 1.1.1 (CE/XSS/CSRF) Multiple Vulnerabilities
SSV-17250 Webl?sninger <= v4 (XSS/SQL) Multiple Remote Vulnerabilities
SSV-8390 vlBook 1.21 (XSS/LFI) Multiple Remote Vulnerabilities
SSV-17217 MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities
SSV-17211 Siteman 2.x (EXEC/LFI/XSS) Multiple Remote Vulnerabilities
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English