| शीर्षक | Simple Cold Storage Management System windows 1.0 Stored Cross-Site scripting |
|---|
| विवरण | Stored Cross-Site Scripting (XSS) vulnerability has been identified in SourceCodester Simple Cold Storage Management System 1.0, specifically occurring post-admin login during the "add new storage" process. This vulnerability allows improper input at the "Name of the Storage parameter" parameter, resulting in a Cross-Site Scripting vulnerability.
PoC:
1. Access the admin portal by logging in.
2. Go to the Storage List section.
3. Select "Add New Storage."
4. Inject an XSS payload into the "Name of Storage" parameter.
5. The stored XSS will trigger, displaying the input provided by the attacker. |
|---|
| स्रोत | ⚠️ https://github.com/shouvikdutta1998/XSS-in-Cold-Storage-Management-System_POC |
|---|
| उपयोगकर्ता | warlockrootx (UID 64540) |
|---|
| सबमिशन | 27/02/2024 04:15 PM (3 साल पहले) |
|---|
| संयम | 29/02/2024 05:34 PM (2 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 211048 [SourceCodester Simple Cold Storage Management System 1.0 Add New Storage Name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|