| शीर्षक | SourceCodester Employee Management System 1.0 Stored XSS |
|---|
| विवरण | This report highlights a stored cross-site scripting (XSS) vulnerability found in the project assignment functionality of the web application. Attackers can inject malicious JavaScript code into the "pname" parameter, leading to potential execution within users' browsers. Exploitation of this vulnerability, accessible via the endpoint /assignproject.php, could result in various malicious activities, such as session hijacking or data theft. The report provides a proof of concept and recommends implementing proper input validation and output encoding techniques to mitigate the risk. |
|---|
| स्रोत | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20EMPLOYEE%20MANAGEMENT%20SYSTEM/XSS%20Vulnerability%20in%20Project%20Assignment%20Report.md |
|---|
| उपयोगकर्ता | nochizplz (UID 64302) |
|---|
| सबमिशन | 23/02/2024 08:44 PM (3 साल पहले) |
|---|
| संयम | 24/02/2024 08:38 AM (12 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 254694 [SourceCodester Employee Management System 1.0 Project Assignment Report /process/assignp.php pname क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|