| शीर्षक | Sourcecodester Employee Management System 1.0 Multiple Stored XSS |
|---|
| विवरण | To simulate this attack, initiate by logging in as an employee and accessing the employee profile editing page. On this page, various input fields, such as fullname, phone, date of birth, address, and date of appointment, are found to be susceptible to stored Cross-Site Scripting (XSS). Exploit this vulnerability by injecting the payload "><script>alert("xss")</script>// into these input fields. Consequently, visiting any page displaying the information from these fields, including the admin panel, triggers an alert prompt with the message "xss." |
|---|
| स्रोत | ⚠️ https://github.com/jomskiller/Employee-Management-System---Stored-XSS/ |
|---|
| उपयोगकर्ता | jomskiller (UID 62271) |
|---|
| सबमिशन | 24/01/2024 02:39 PM (3 साल पहले) |
|---|
| संयम | 29/01/2024 08:15 AM (5 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 252279 [SourceCodester Employee Management System 1.0 edit-profile.php क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|