| Titel | XSS injection vulnerability exists in txtphone parameter of design-and-implementation-covid-19-directory-vacination |
|---|
| Beschreibung | XSS injection vulnerability exists in txtphone parameter of register.php file of design-and-implementation-covid-19-directory-vacination
With XSS, cybercriminals can turn trusted websites into malicious ones, thus causing inordinate harm and damage not only to the victims but also to the reputation of the trusted website's owner.
Payload:
txtphone=%27%22%28%29%26%25%3Czzz%3E%3CScRiPt+%3Ealert%28%27phone%27%29%3C%2FScRiPt%3E |
|---|
| Quelle | ⚠️ https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(5).pdf |
|---|
| Benutzer | SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (UID 38936) |
|---|
| Einreichung | 11.03.2023 15:55 (vor 3 Jahren) |
|---|
| Moderieren | 11.03.2023 18:41 (3 hours later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 222853 [SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System register.php Cross Site Scripting] |
|---|
| Punkte | 0 |
|---|