| Título | gedelumbung HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8 Cross Site Scripting |
|---|
| Descripción | The affected components are `application/modules/web/controllers/contact.php::kirim()` (unauthenticated entry), `application/modules/admin/views/contact/bg_home.php` / `bg_input.php`, and `application/models/app_global_admin_model.php::generate_index_contact()`. The `kirim()` action persists `$_POST['nama']`, `$_POST['email']`, `$_POST['alamat']`, `$_POST['telepon']`, and `$_POST['pesan']` directly into `dlmbg_contact` without sanitization:
```php
// application/modules/web/controllers/contact.php
function kirim()
{
$in['nama'] = $_POST['nama'];
$in['email'] = $_POST['email'];
$in['alamat'] = $_POST['alamat'];
$in['telepon'] = $_POST['telepon'];
$in['pesan'] = $_POST['pesan'];
$this->db->insert("dlmbg_contact",$in);
...
}
```
The admin list view (`generate_index_contact`) and the edit form (`bg_input.php`) echo `$h->nama`, `$h->email`, `$h->telepon`, `$h->alamat`, and `$h->pesan` unescaped. The `pesan` and `alamat` fields are loaded inside `<textarea class="ckeditor">` blocks, so the stored HTML/JS survives CKEditor round-trips and fires whenever an admin opens or saves the entry.
|
|---|
| Fuente | ⚠️ https://github.com/gedelumbung/HospitalManagement/issues/14 |
|---|
| Usuario | lixiang (UID 101908) |
|---|
| Sumisión | 2026-10-09 13:53 (hace 14 días) |
|---|
| Moderación | 2026-10-22 21:33 (13 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 425387 [gedelumbung HospitalManagement hasta c2d45543789a3887067d3915f69d44cfc2cf76a8 Contact Form contact.php kirim nama/email/alamat/telepon/pesan secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 20 |
|---|