PRODUCT PROFILE

FUDforum

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2021-275202021/03/20

FUDForum 3.1.0 - Cross-Site Scripting

FUDForum 3.1.0 contains a cross-site scripting vulnerability. An attacker can inject JavaScript via index.php in the author parameter, thereby possibly stealing cookie-based authentication credentials and launching other attacks.

FUDforumPoC 已收录

CVSS6.1EPSS 1.1%

中危CVE-2021-275192021/03/20

FUDForum 3.1.0 - Cross-Site Scripting

FUDForum 3.1.0 contains a cross-site scripting vulnerability which allows remote attackers to inject JavaScript via index.php in the "srch" parameter.

FUDforumPoC 已收录

CVSS6.1EPSS 3.8%