Phpwind goto. php XSS Vulnerability (CVE-2015-4135)

Phpwind goto. php XSS Vulnerability (CVE-2015-4135)
Phpwind goto. php XSS Vulnerability (CVE-2015-4135)

Release date:
Updated on:

Affected Systems:

PHPWind 8.7

Description:

CVE (CAN) ID: CVE-2015-4135

PHPWind is a popular PHP-based Web forum program in China.

Phpwind 8.7 and goto. php have multiple cross-site scripting vulnerabilities. Remote attackers can exploit this vulnerability to inject arbitrary Web scripts or HTML code through url parameters.

<* Source: vendor
*>

Suggestion:

Vendor patch:

PHPWind
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://tetraph.com/security/xss-vulnerability/phpwind-v8-7-xss/

This article permanently updates the link address: