XYCMS婚纱摄影中心建站系统存储型XSS+SQL注入

简要描述： XYCMS婚纱摄影中心建站系统存储型XSS+SQL注入。 详细说明： XYCMS婚纱摄影中心建站系统存储型XSS+SQL注入。 源码地址：XYCMS婚纱摄影中心 v1.7 http://down.chinaz.com/soft/35204.htm 1.存储型XSS：online.asp 实例+证明： http://www.gzblhs.com/online.asp http://www.028sheying.com/online.asp http://www.shmtq.com/online.asp http://www.tjjzl.cn/online.asp...

CVE-2009-0761

Cross-site scripting XSS vulnerability in online.asp in Team Board 1.x allows remote attackers to inject arbitrary web script or HTML via the lookname parameter...

CVE-2009-0761

CVE-2009-0761 describes a cross-site scripting (XSS) vulnerability in the age-old Team Board 1.x product, specifically in the online.asp component. The issue allows remote attackers to inject arbitrary web script or HTML via the lookname parameter. According to the sources, the CVSS base score is...

CVE-2009-0761

Cross-site scripting XSS vulnerability in online.asp in Team Board 1.x allows remote attackers to inject arbitrary web script or HTML via the lookname parameter...