| عنوان | langleyfcu/online-banking-system web 1 XSS vulnerability |
|---|
| الوصف | The project named "online-banking-system" has an XSS vulnerability.Download the project to your local machine, set up the environment properly, and log in using the known account credentials from the database. After a successful login, access connection_error.php and you will notice that error messages are directly echoed on the webpage. Construct the payload: ?error=<script>alert("XSS")</script> — this will successfully trigger a pop-up window, proving that the project has an XSS vulnerability.
|
|---|
| المصدر | ⚠️ https://github.com/Lianhaorui/Report/blob/main/xss.docx |
|---|
| المستخدم | lianhaorui (UID 91045) |
|---|
| ارسال | 27/09/2025 02:00 PM (1 سنة منذ) |
|---|
| الاعتدال | 27/09/2025 07:55 PM (6 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 326206 [langleyfcu Online Banking System حتى 57437e6400ce0ae240e692c24e6346b8d0c17d7a Error Message /connection_error.php error البرمجة عبر المواقع] |
|---|
| النقاط | 20 |
|---|