| عنوان | PHPGurukul Hospital-Management-System 4.0 Cross Site Scripting |
|---|
| الوصف | A critical Stored Cross-Site Scripting (XSS) vulnerability was discovered in the edit-patient.php file of PHPGurukul's Hospital Management System (v4.0).
Attackers can inject malicious JavaScript via the patname field (POST parameter), which gets persistently stored in the database and executed whenever the profile page is viewed. |
|---|
| المصدر | ⚠️ https://github.com/Ant1sec-ops/Hospital-management-Systemv4.0-Stored-XSS/blob/main/stored-xss-exploit.md |
|---|
| المستخدم | Subhash Paudel (UID 66830) |
|---|
| ارسال | 02/06/2025 04:49 PM (1 سنة منذ) |
|---|
| الاعتدال | 03/06/2025 10:51 PM (1 day later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 311046 [PHPGurukul Hospital Management System 4.0 POST Parameter edit-patient.php?editid=2 patname البرمجة عبر المواقع] |
|---|
| النقاط | 18 |
|---|