| عنوان | PHPGurukul Online Banquet BooKing System 1.0 Cross Site Scripting |
|---|
| الوصف | A Reflected Cross-Site Scripting (XSS) vulnerability exists in the userpassword cookie parameter of the Online Banquet BooKing System.
An attacker can inject malicious JavaScript into the userpassword cookie, which is reflected unsanitized in the login page (admin/login.php).
The script executes immediately when a victim opens the page, leading to code execution in the user's browser context. |
|---|
| المصدر | ⚠️ https://github.com/LagonGit/ReportCVE/issues/3 |
|---|
| المستخدم | Longlagon (UID 88119) |
|---|
| ارسال | 19/07/2025 10:24 AM (1 سنة منذ) |
|---|
| الاعتدال | 21/07/2025 08:25 AM (2 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 317054 [PHPGurukul Online Banquet Booking System 1.0 /admin/login.php user_login/userpassword البرمجة عبر المواقع] |
|---|
| النقاط | 0 |
|---|