| शीर्षक | SourceCodester Inventory Management System 1.0 has a Persistent Cross Site Scripting vulnerability in suppliar_data.php |
|---|
| विवरण | https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/Inventory-Management-System-XSS.md
The link above is a detailed report on the issue.
Software
Software: Inventory Management System 1.0
Software Link: https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html
Vulnerability Type: XSS
Attack Type: Remote
Vendor of Product: Sourcecodester
Description
A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. SourceCodester Inventory Management System 1.0 has a Persistent Cross Site Scripting vulnerability in suppliar_data.php. The manipulation of the argument name or company leads to malicious Javascript being rendered. Remote attackers can leverage this to affect any other users that visit that portion of the application. |
|---|
| स्रोत | ⚠️ Stored XSS // <img src=x onerror=alert(1)> |
|---|
| उपयोगकर्ता | error404unknown (UID 53361) |
|---|
| सबमिशन | 25/08/2023 06:45 PM (3 साल पहले) |
|---|
| संयम | 26/08/2023 05:51 PM (23 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 238153 [SourceCodester Inventory Management System 1.0 suppliar_data.php name/company क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|