Lucene search
K

3 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.2 views

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, stems from the lack of measures to neutralize XSS alternative syntax. This allows attackers to replace the displayed URL with their own malicious content.

The vulnerability of the XWiki Platform lies in the lack of measures taken to neutralize the XSS alternative syntax. Exploiting this vulnerability allows a malicious actor to substitute the displayed URL with another value...

6.4CVSS6.3AI score0.02048EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.2 views

The vulnerability of the XWiki platform for creating collaborative web applications lies in its lack of measures to neutralize alternative syntaxes that constitute XSS attacks. This allows attackers to replace the displayed URL.

The vulnerability of the XWiki Platform lies in the lack of measures taken to neutralize the XSS alternative syntax. Exploiting this vulnerability allows a malicious actor to substitute the displayed URL with another value...

6.4CVSS6.3AI score0.02377EPSS
Exploits0References6Affected Software1
rdot
rdot
added 2011/02/17 12:0 a.m.16 views

Альтернативный LIMIT

Затравка. Приведу альтернативу LIMIT, когда в url нельзя использовать символы: пробел,,',/,% Из-за ограничений отпадают альтернативные пробелы %09,%0A,... и //. Остается альтернативный синтаксис с использованием скобок. Но синтаксис limit не позволяет даже их: Код: ... limit1,100 -- error...

1.3AI score
Exploits0
Rows per page
Query Builder