2 matches found
Maian Script World Maian Affiliate 代码注入漏洞
Maian Script World Maian Affiliate is a free, simple but powerful php referral system system written in PHP by Maian Script World, UK. MaianAffiliate suffers from a code injection vulnerability that stems from the injected payload being reflected on the affiliate site homepage for all authenticat...
docsify 跨站脚本漏洞
docsify is a documentation website generator. A cross-site scripting vulnerability exists in docsify versions prior to 4.12.0. The vulnerability stems from the fact that it is possible to bypass the isURL external check by inserting more "////" characters to clean up the HTML code on the homepage...