漏洞描述
Drupal是一款用量庞大的CMS，该漏洞需要利用drupal文件模块上传文件的漏洞，伪造一个图片文件，上传，文件的内容实际是一段HTML代码，内嵌JS，这样其他用户在访问这个链接时，就可能触发XSS漏洞。
Drupal XSS漏洞(CVE-2019-6341)
PoC代码
暂无相关漏洞推荐
-
CVE-2014-3704: Drupal SQL Injection POC
2025-08-01 | DrupalThe expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not... -
CVE-2018-7600: Drupal - Remote Code Execution POC
2025-08-01 | DrupalDrupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attac... -
CVE-2018-7602: Drupal - Remote Code Execution POC
2025-08-01 | DrupalDrupal 7.x and 8.x contain a remote code execution vulnerability that exists within multiple subsyst... -
CVE-2019-0193: Apache Solr Remote Code Execution POC
2025-09-01 | Apache Solr2019 年 08 月 01 日，Apache Solr 官方发布预警，Apache Solr DataImport 功能 在开启 Debug 模式时，可以接收来自请求的”dataConfig”参数，... -
CVE-2019-0230: Apache Struts <=2.5.20 - Remote Code Execution S2-059 POC
2025-09-01 | Apache StrutsApache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation when evaluated on raw user input in tag ...