| शीर्षक | Sourcecodester Daily Habit Tracker 1.0 Stored XSS |
|---|
| विवरण | The Daily Habit Tracker web application has a vulnerability in its project assignment feature that allows for stored cross-site scripting (XSS) attacks. This vulnerability, categorized as CWE-79, occurs in the /endpoint/update-tracker.php component due to inadequate input handling during webpage creation. Attackers can exploit this by inserting harmful JavaScript code into the "day" parameter when assigning projects. Users who then view these assigned project names may unknowingly activate the injected script in their browsers, potentially leading to dangerous actions like session hijacking or data theft. A Proof of Concept (POC) is presented with a sample payload and HTTP request, along with a screenshot showing the successful execution of unauthorized scripts. |
|---|
| स्रोत | ⚠️ https://github.com/vanitashtml/CVE-Dumps/blob/main/Stored%20XSS%20Daily%20Habit%20Tracker.md |
|---|
| उपयोगकर्ता | rjavenido22 (UID 64261) |
|---|
| सबमिशन | 29/02/2024 02:26 PM (3 साल पहले) |
|---|
| संयम | 01/03/2024 08:41 AM (18 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 255391 [SourceCodester Daily Habit Tracker 1.0 update-tracker.php day क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|