CVE-2007-6160

NONE

Cross-site scripting (XSS) vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via the aarstal parameter in a yeardetail action.

发布于: 11/29/2007更新于: 4/9/2025
在NVD查看在MITRE查看

描述

Cross-site scripting (XSS) vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via the aarstal parameter in a yeardetail action.

AI分析AI驱动

受影响产品

tildetilde_cms
4.0

可用漏洞利用 (1)

参考资料