| शीर्षक | SOURCECODESTER File Manager App 1.0 Stored XSS |
|---|
| विवरण | The File Manager App is vulnerable to Stored Cross-Site Scripting (XSS) in /endpoint/add-file.php. This vulnerability arises from not sanitizing user inputs for fileTitle and fileUploader fields, allowing attackers to inject malicious JavaScript code. As demonstrated, submitting a file with a specially crafted fileTitle or fileUploader value can execute arbitrary JavaScript code, such as displaying an alert box. This highlights the necessity for stringent input validation and sanitization to prevent stored XSS vulnerabilities, thereby safeguarding the application and its users from potential malicious exploits. |
|---|
| स्रोत | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20File%20Manager%20App/STORED%20XSS%20add-file.php.md |
|---|
| उपयोगकर्ता | nochizplz (UID 64302) |
|---|
| सबमिशन | 17/03/2024 12:47 PM (3 साल पहले) |
|---|
| संयम | 18/03/2024 05:06 PM (1 day later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 243595 [SourceCodester File Manager App 1.0 endpoint/add-file.php uploadedFileName अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|