漏洞标题
Campcodes美容 salon管理系统增加分类.php跨站脚本
漏洞描述信息
Campcodes美容沙龙管理系统add-category.php跨站脚本漏洞
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
漏洞类别
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
漏洞标题
Campcodes Beauty Salon Management System add-category.php cross site scripting
漏洞描述信息
A vulnerability, which was classified as problematic, was found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/add-category.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235245 was assigned to this vulnerability.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
漏洞类别
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
漏洞标题
Campcodes Beauty Salon Management System 跨站脚本漏洞
漏洞描述信息
Campcodes Beauty Salon Management System是Campcodes公司的一个美容美发管理系统。 Campcodes Beauty Salon Management System 1.0版本存在跨站脚本漏洞,该漏洞源于/admin/add-category.php 中存在未知部分,通过参数name 导致跨站脚本。
CVSS信息
N/A
漏洞类别
跨站脚本