| शीर्षक | boyiddha Automated-Mess-Management-System 1.0 Stored XSS |
|---|
| विवरण | The presence of Stored Cross-Site Scripting (XSS) in the /member/member_edit.php endpoint of boyiddha's Automated-Mess-Management-System poses a significant security risk. Attackers can exploit this vulnerability to inject malicious scripts into the application, leading to unauthorized access, session hijacking, or phishing attacks. To replicate the attack, an authenticated user must navigate to the "Update membership" section and inject a payload into the "fullname" parameter. Upon submission, the injected script will execute whenever the page is viewed, potentially compromising user data or system integrity. Developers can mitigate this risk by implementing proper input validation and output encoding to neutralize malicious scripts. |
|---|
| स्रोत | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/boyiddha%20utomated-Mess-Management-System/STORED%20XSS%20member-member-edit.php%20.md |
|---|
| उपयोगकर्ता | nochizplz (UID 64302) |
|---|
| सबमिशन | 26/02/2024 05:27 PM (3 साल पहले) |
|---|
| संयम | 07/03/2024 05:04 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 256052 [boyiddha Automated-Mess-Management-System 1.0 /member/member_edit.php नाम क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|