| عنوان | gedelumbung HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8 Cross Site Scripting |
|---|
| الوصف | The affected components are `application/modules/web/controllers/contact.php::kirim()` (unauthenticated entry), `application/modules/admin/views/contact/bg_home.php` / `bg_input.php`, and `application/models/app_global_admin_model.php::generate_index_contact()`. The `kirim()` action persists `$_POST['nama']`, `$_POST['email']`, `$_POST['alamat']`, `$_POST['telepon']`, and `$_POST['pesan']` directly into `dlmbg_contact` without sanitization:
```php
// application/modules/web/controllers/contact.php
function kirim()
{
$in['nama'] = $_POST['nama'];
$in['email'] = $_POST['email'];
$in['alamat'] = $_POST['alamat'];
$in['telepon'] = $_POST['telepon'];
$in['pesan'] = $_POST['pesan'];
$this->db->insert("dlmbg_contact",$in);
...
}
```
The admin list view (`generate_index_contact`) and the edit form (`bg_input.php`) echo `$h->nama`, `$h->email`, `$h->telepon`, `$h->alamat`, and `$h->pesan` unescaped. The `pesan` and `alamat` fields are loaded inside `<textarea class="ckeditor">` blocks, so the stored HTML/JS survives CKEditor round-trips and fires whenever an admin opens or saves the entry.
|
|---|
| المصدر | ⚠️ https://github.com/gedelumbung/HospitalManagement/issues/14 |
|---|
| المستخدم | lixiang (UID 101908) |
|---|
| ارسال | 09/10/2026 01:53 PM (14 أيام منذ) |
|---|
| الاعتدال | 22/10/2026 09:33 PM (13 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 425387 [gedelumbung HospitalManagement حتى c2d45543789a3887067d3915f69d44cfc2cf76a8 Contact Form contact.php kirim nama/email/alamat/telepon/pesan البرمجة عبر المواقع] |
|---|
| النقاط | 20 |
|---|