| عنوان | SourceCodester Stock Management System v1.0 V1.0 XSS |
|---|
| الوصف | - A Stored XSS vulnerability was found in the `/php_action/getOrderReport.php` file of the "Stock Management System" project. The vulnerability originates from the `clientName` and `clientContact` fields submitted via `php_action/createOrder.php`, which are stored in the MySQL database without any sanitization or filtering. When `getOrderReport.php` generates an HTML report table and outputs `client_name` and `client_contact` values directly into HTML `<td>` elements without `htmlspecialchars()` encoding, any malicious script code stored in the database is rendered and executed in the victim''s browser.
- Attackers can exploit this Stored XSS vulnerability to steal cookies, session tokens, or other sensitive information of any user who generates an order report. The payload is triggered when an administrator visits the report page and generates a report that includes the malicious order. This allows attackers to perform actions on behalf of the victim, deface web pages, redirect users to malicious websites, and gain control of the victim''s browser.
- During the security review of "Stock Management System", I discovered a critical Stored XSS vulnerability in the "/php_action/getOrderReport.php" file. Since order reports aggregate multiple orders, a single malicious order can compromise every administrator who views the report, making this a high-impact vulnerability requiring immediate remediation. |
|---|
| المصدر | ⚠️ https://github.com/i-QvQ-i/first-OvO/issues/13 |
|---|
| المستخدم | i-OvO-i (UID 97659) |
|---|
| ارسال | 06/07/2026 09:59 PM (2 أشهر منذ) |
|---|
| الاعتدال | 22/08/2026 12:12 PM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 394300 [SourceCodester Stock Management System 1.0 getOrderReport.php clientName/clientContact البرمجة عبر المواقع] |
|---|
| النقاط | 20 |
|---|