Submit #49603: Sanitization Management System v1.0 Stored Cross Site Scriptinginfo

TitleSanitization Management System v1.0 Stored Cross Site Scripting
DescriptionIn Sanitization Management System v1.0, several parameters do not have sufficient input sanitization mechanisms which led to successful execution of cross-site scripting payloads. Affected parameters: 1. name (Endpoint: /php-sms/classes/SystemSettings.php) 2. shortname (Endpoint: /php-sms/classes/SystemSettings.php) 3. message (Endpoint: /php-sms/classes/Master.php) Affected Sink: 1. Entire application for /php-sms/classes/SystemSettings.php 2. /php-sms/admin/?page=inquiries/view_inquiry for /php-sms/classes/Master.php References: https://www.sourcecodester.com/php/15770/sanitization-management-system-project-php-and-mysql-free-source-code.html
Userjiajian (ID 34329)
Submission10/23/2022 18:59 (2 years ago)
Moderation10/24/2022 07:40 (13 hours later)
Accepted
Accepted
VulDB EntryVDB-212015

◂ PreviousOverviewNext ▸