| शीर्षक | https://www.sourcecodester.com/sql/17287/prison-management-syste Prison Management System v1.0 Cross-Site Scripting |
|---|
| विवरण | Source Code: https://www.sourcecodester.com/sql/17287/prison-management-system.html
Summary:
A Cross-Site Scripting (XSS) vulnerability has been discovered in Prison Management System. The vulnerability exists due to improper sanitization of user-controlled input in the txtstart_date and txtend_date parameters. Attackers can exploit this vulnerability by injecting arbitrary JavaScript code into the application, leading to the execution of malicious scripts in the context of the victim's browser. This could result in various attacks such as session hijacking, phishing, or defacement of the application's interface. |
|---|
| स्रोत | ⚠️ https://github.com/zyairelai/CVE-submissions/blob/main/prison-xss.md |
|---|
| उपयोगकर्ता | zyairelai (UID 67401) |
|---|
| सबमिशन | 08/04/2024 08:05 AM (2 साल पहले) |
|---|
| संयम | 08/04/2024 09:05 AM (60 minutes later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 259696 [SourceCodester Prison Management System 1.0 apply_leave.php txtstart_date/txtend_date क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|