| عنوان | Vehicle Management System 1.0 Cross-site Scripting |
|---|
| الوصف | The extra-cost parameter in the billaction.php file of the Vehicle Management System is not strictly verified for user input, resulting in the input data can be combined with Sql statements, resulting in the user input information displayed on the page without filtering. As a result, Cross-site Scripting (XSS) exists. Attackers can exploit the vulnerability, threatening user security.
Source Download:https://itsourcecode.com/free-projects/php-project/vehicle-management-system-project-in-php-free-download/ |
|---|
| المصدر | ⚠️ https://github.com/FinleyTang/Vehicle-Management-System/blob/main/Vehicle%20Management%20System%20billaction.php%20has%20Cross-site%20Scripting%20(XSS).pdf |
|---|
| المستخدم | FinleyTang (UID 44196) |
|---|
| ارسال | 13/12/2024 09:03 AM (2 سنوات منذ) |
|---|
| الاعتدال | 19/12/2024 08:58 AM (6 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 288959 [itsourcecode Vehicle Management System 1.0 /billaction.php extra-cost البرمجة عبر المواقع] |
|---|
| النقاط | 20 |
|---|