| Título | SourceCodester Service Provider Management System using PHP and MySQL 1.0 Cross Site Scripting |
|---|
| Descripción | The vulnerability resides in the file system_info/index.php. Input from users in the System Name and System Short Name fields is not properly sanitized, allowing for Cross-Site Scripting (XSS) attacks to be executed. |
|---|
| Fuente | ⚠️ https://docs.google.com/document/d/1upC4101Ob9UW7fGC_valsEa45Q5xuBgcKZhs1Q-WoBM/edit?usp=sharing |
|---|
| Usuario | R0ck3t (UID 70759) |
|---|
| Sumisión | 2024-06-22 07:55 (hace 2 años) |
|---|
| Moderación | 2024-06-22 17:41 (10 hours later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 269479 [SourceCodester Service Provider Management System 1.0 System Info Page system_info/index.php System Name/System Short Name secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 17 |
|---|