| शीर्षक | sourcecodester Computer Laboratory Management System 1.0 Execution After Redirect (EAR) and Stord XsS |
|---|
| विवरण | The Computer Laboratory Management System suffers from two critical vulnerabilities: Execution After Redirect (EAR) - Authorization Bypass and Stored Cross-Site Scripting (XSS). The EAR flaw allows unauthorized users to circumvent authentication controls, potentially leading to unauthorized access and data compromise. Additionally, the XSS vulnerability enables attackers to inject and execute malicious scripts, posing risks of session hijacking, data theft, and malware propagation. Remediation involves proper script termination, input validation, and output encoding to mitigate these vulnerabilities. Regular security audits and updates are essential to maintaining system integrity and safeguarding against exploitation. |
|---|
| स्रोत | ⚠️ https://github.com/Sospiro014/zday1/blob/main/ear_stord_xss.md |
|---|
| उपयोगकर्ता | SoSPiro (UID 67134) |
|---|
| सबमिशन | 05/04/2024 12:55 PM (3 साल पहले) |
|---|
| संयम | 05/04/2024 03:33 PM (3 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 259498 [SourceCodester Computer Laboratory Management System 1.0 SystemSettings.php?f=update_settings name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|