| Título | XSS injection vulnerability exists in txtphone parameter of design-and-implementation-covid-19-directory-vacination |
|---|
| Descripción | XSS injection vulnerability exists in txtphone parameter of register.php file of design-and-implementation-covid-19-directory-vacination
With XSS, cybercriminals can turn trusted websites into malicious ones, thus causing inordinate harm and damage not only to the victims but also to the reputation of the trusted website's owner.
Payload:
txtphone=%27%22%28%29%26%25%3Czzz%3E%3CScRiPt+%3Ealert%28%27phone%27%29%3C%2FScRiPt%3E |
|---|
| Fuente | ⚠️ https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(5).pdf |
|---|
| Usuario | SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (UID 38936) |
|---|
| Sumisión | 2023-03-11 15:55 (hace 4 años) |
|---|
| Moderación | 2023-03-11 18:41 (3 hours later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 222853 [SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System register.php secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 0 |
|---|