| शीर्षक | code-projects Simple Online Hotel Reservation System 1.0 Cross site scripting |
|---|
| विवरण | 1. Access the reservation link and identify vulnerable input fields (Firstname and Lastname).
2. Capture the request in BurpSuite to bypass initial payload rejection.
3. Insert XSS payload (<script>alert(1)</script>) in either field and send the request.
4. Reservation details, visible only to administrators, trigger the payload upon viewing.
5. Blind XSS payload can lead to stealing admin cookies for account takeover. |
|---|
| स्रोत | ⚠️ https://drive.google.com/file/d/1BIa4jfZ9FbW9d7O3tRdAKF3tb6b5NUB6/view?usp=sharing |
|---|
| उपयोगकर्ता | mallutrojan (UID 60819) |
|---|
| सबमिशन | 11/01/2024 07:59 PM (3 साल पहले) |
|---|
| संयम | 12/01/2024 03:15 PM (19 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 250618 [code-projects Simple Online Hotel Reservation System 1.0 Make a Reservation Page add_reserve.php Firstname/Lastname क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|