CVE:CVE-2018-6866
CNNVD:CNNVD-201802-617
PHP Scripts Mall Learning and Examination Management System Script是印度PHP Scripts Mall公司的一套在线学习和考试管理系统。该系统主要用于在线考试和在线测验。
PHP Scripts Mall Learning and Examination Management System Script 2.3.1版本中存在跨站脚本漏洞。远程攻击者可借助特制的消息利用该漏洞注入任意的Web脚本或HTML。
solution:Upgrade learning_and_examination_management_system_script_project learning_and_examination_management_system_script to a higher version than 2.3.1,and avoid the version 2.3.1