漏洞分类 — 跨站脚本

英文名字
XSS
CVE ID：
79
漏洞详情：
跨站脚本，即Cross Site Script (通常简写为XSS)是指攻击者利用网站程序对用户输入过滤不足，输入可以显示在页面上对其他用户造成影响的HTML代码，从而盗取用户资料、利用用户身份进行某种动作或者对访问者进行病毒侵害的一种攻击方式。

相关漏洞

SSV ID 漏洞名称
SSV-89474 Discuz 7.2 admincp.php 反射型 xss漏洞
SSV-89451 Wordpress sourceAFRICA Plugin Cross Site Scripting
SSV-89422 Joomla GoogleSearch (CSE) 3.0.2 XSS Vulnerabilities
SSV-89417 Discuz! admincp.php CSRF引起XSS
SSV-89411 WordPress White-Label Framework 2.0.6 - XSS Vulnerability
SSV-89387 JSPMySQL Administrador CSRF & XSS Vulnerabilities
SSV-89330 Discuz 3.2 /static/js/bbcode.js 跨站脚本漏洞
SSV-89322 GeniXCMS 0.0.3 - XSS Vulnerabilities
SSV-89312 Oracle WebLogic SSRF And XSS
SSV-89311 WordPress <= 4.2 - Stored XSS
SSV-89303 Bedita 3.5.1 - XSS Vulnerabilities
SSV-89302 Drupal up to 7.38 Ajax Handler a Tag cross site scripting
SSV-89298 PhpWiki 1.5.4 Cross Site Scripting / Local File Inclusion
SSV-89295 Yiqicms 存储型XSS
SSV-89292 Opera 31.0.1889.174 XSS Filter Bypass
SSV-89288 Schneider Electric Modicon M340 PLC Station P34模块Web Servers安全漏洞
SSV-89286 SolarWinds Orion IP Address Manager (IPAM) 'search.aspx' Cross Site Scripting Vulnerability
SSV-89280 Firefox < 39.0.3 - pdf.js Same Origin Policy Exploit
SSV-89278 Google Analyticator Multiple XSS Vulnerabilities
SSV-89274 Caucho Resin Professional 3.1.5 - 'resin-admin/digest.php' Multiple Cross-Site Scripting Vulnerabili
SSV-89273 Zimbra 'view' Parameter Cross Site Scripting Vulnerability
SSV-89269 WordPress Googmonify Plugin 0.8.1 - XSS/CSRF
SSV-89259 Tendoo CMS 1.3 - XSS Vulnerabilities
SSV-89252 Discuz 7.2 反射型xss漏洞
SSV-89248 Discuz 前台回帖 存储型 DOM XSS
SSV-89201 Coremail XT-3.0 /coremail/XT3/main/intervalCheck.jsp 跨站脚本漏洞
SSV-89179 WordPress example.html 跨站脚本漏洞
SSV-89122 UWA 2.1.5 /core/lib/ext/AFilter.class.php 跨站脚本漏洞
SSV-89065 TurboMail <=6.0.0 /mailmain 跨站脚本漏洞
SSV-89028 MyBB 1.8.1 /report.php 跨站脚本漏洞
SSV-89027 MyBB 1.8.1 /admin/modules/config/language.php 跨站脚本漏洞
SSV-89025 Discuz 7.x /include/global.func.php 跨站脚本漏洞
SSV-89011 MyBB 1.8.2 MyBBlog 跨站脚本漏洞
SSV-88999 Qibo Information V1 /search.php 跨站脚本漏洞
SSV-88987 Wordpress 3.9.2 /wp-includes/formatting.php 跨站脚本漏洞
SSV-88985 Mybb 1.8.1 /report.php 跨站脚本漏洞
SSV-87406 WordPress SupportEzzy Ticket System Plugin 1.2.5 - Stored XSS Vulnerability
SSV-87380 HP Operations Agent Remote XSS iFrame Injection
SSV-87407 phpSound Music Sharing Platform 1.0.5 - Multiple XSS Vulnerabilities
SSV-87357 Croogo 2.0.0 - Multiple Stored XSS Vulnerabilities
SSV-87396 ZTE Modem ZXDSL 531BIIV7.3.0f_D09_IN - Stored XSS Vulnerability
SSV-87370 Feng Office 1.7.4 - Cross Site Scripting Vulnerabilities
SSV-87376 Folder Plus 2.5.1 iOS - Persistent XSS Vulnerability
SSV-87409 Mouse Media Script 1.6 0 - Stored XSS Vulnerability
SSV-87300 All In One Wordpress Firewall 3.8.3 - Persistent XSS Vulnerability
SSV-87306 Nessus Web UI 2.3.3 - Stored XSS
SSV-87277 Restaurant Script (PizzaInn Project) - Stored XSS
SSV-87274 Livefyre LiveComments Plugin - Stored XSS
SSV-87235 MyBB User Social Networks Plugin 1.2 - Stored XSS
SSV-87245 PhpOnlineChat 3.0 - XSS
SSV-87249 Syslog LogAnalyzer 3.6.5 - Stored XSS (Python Exploit)
SSV-87254 ChatSecure IM 2.2.4 iOS - Persistent XSS Vulnerability
SSV-87239 vBulletin 5.1.X - Persistent Cross Site Scripting
SSV-87257 OroCRM - Stored XSS Vulnerability
SSV-87250 PHP Stock Management System 1.02 - Multiple Persistent Cross Site Scripting Vulnerabilities
SSV-88849 PHPOnlineChat 3.0 /canned_opr.php 跨站脚本漏洞
SSV-87218 Arachni Web Application Scanner Web UI - Stored XSS Vulnerability
SSV-87207 ntopng 1.2.0 - XSS Injection
SSV-87208 WooCommerce Store Exporter 1.7.5 - Multiple XSS Vulnerabilities
SSV-88817 oxwall 1.7.0 /users.php 跨站脚本漏洞
SSV-87200 Feng Office - Stored XSS
SSV-87198 Disqus for Wordpress 2.7.5 Admin Stored CSRF and XSS
SSV-88756 ZeroCMS 1.0 /zero_transact_user.php 跨站脚本漏洞
SSV-87162 Moodle 2.7 - Persistent XSS
SSV-87161 ZeroCMS 1.0 - Persistent Cross-Site Scripting Vulnerability
SSV-87154 Zenoss Monitoring System 4.2.5-2108 64bit - Stored XSS
SSV-88695 Discuz 7.2 /post.php 跨站脚本漏洞
SSV-87118 Zurmo CRM - 储存型XSS
SSV-87108 Toms Gästebuch 1.00 admin/header.php Multiple Parameter XSS
SSV-87107 Toms Gästebuch 1.00 form.php Multiple Parameter XSS
SSV-88675 eFront 3.6.14.4 profile.php 跨站脚本漏洞
SSV-62673 Collabtive 1.2 /class.project.php 跨站脚本漏洞
SSV-62660 Startbbs /swfupload.swf 跨站脚本漏洞
SSV-62246 Ektron CMS多个HTML注入漏洞
SSV-62233 HP Universal Configuration Management Database远程代码执行漏洞
SSV-62229 F-Secure Messaging Security Gateway 'new'参数跨站脚本漏洞
SSV-62216 D-Link DAP-1150 index.cgi多个参数存储型跨站脚本漏洞
SSV-62213 WordPress Unconfirmed Plugin 's'插件跨站脚本漏洞
SSV-62205 Common Unix Printing System WEB接口跨站脚本漏洞
SSV-62215 Connect &quot;_method&quot;跨站脚本漏洞
SSV-62195 PivotX多个跨站脚本漏洞
SSV-62166 Adobe Reader for Android多个任意代码执行漏洞
SSV-62146 Juniper JunOS J-Web多个跨站脚本漏洞
SSV-62147 Juniper JunOS J-Web系统监控脚本插入漏洞
SSV-62158 GNU a2ps任意命令执行漏洞
SSV-62159 WordPress HK Exif Tags插件EXIF标签脚本注入漏洞
SSV-62134 Adobe Flash Player/AIR未明跨站脚本漏洞
SSV-62126 OpenStack Horizon Orchestration Dashboard栈模版描述字段存储型跨站脚本漏洞
SSV-62129 TIBCO多个产品多个服务未明跨站脚本漏洞
SSV-62127 Open-Xchange AppSuite Drive组件Email附件文件名存储型跨站脚本漏洞
SSV-62117 Drupal Print模块脚本注入漏洞
SSV-62114 XAMPP跨站脚本和跨站请求伪造漏洞
SSV-62113 SFR Box NB6多个跨站脚本漏洞
SSV-62118 Fortinet FortiADC 'locale'参数跨站脚本漏洞
SSV-62077 Huawei Echo Life HG8247 HTML注入漏洞
SSV-62085 WordPress Maps Marker Pro插件多个安全漏洞
SSV-62063 Pearson eSIS 'loginverification.aspx'跨站脚本漏洞
SSV-62065 RSA Adaptive Authentication (On-Premise)跨站脚本漏洞
SSV-62056 Review Board Search Field跨站脚本漏洞
SSV-62045 RSA Adaptive Authentication (On Premise)跨框架脚本攻击漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English