| Título | codeastro Vehicle Booking System 1.0 Stored XSS |
|---|
| Descripción | The user register in the Vehicle Booking System by codeastro is vulnerable to Stored XSS vulnerability and there are multiple vulnerable parameter Full_Name,Last_Name,Address and the XSS is in affected at the admin page for managing user and view user page and basic XSS payload <script>alert(document.cookie)</script> |
|---|
| Fuente | ⚠️ https://drive.google.com/file/d/1ihxLw4kzbAbDhHtca3UnTaB-iMWHi5DJ/view?usp=sharing |
|---|
| Usuario | vipindas (UID 61015) |
|---|
| Sumisión | 2024-01-06 10:49 (hace 3 años) |
|---|
| Moderación | 2024-01-09 15:00 (3 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 250113 [CodeAstro Vehicle Booking System 1.0 User Registration usr/usr-register.php Full_Name/Last_Name/Address secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 19 |
|---|