| शीर्षक | SourceCodester Simple Student Attendance System using PHP and MySQL 1.0 Cross Site Scripting |
|---|
| विवरण | The vulnerability exists in the student_form.php file at line 6, where the id parameter is accepted without proper sanitization and validation. This id parameter is subsequently passed to the get_student() function located in actions.class.php at line 127. Due to insufficient input validation, this allows for SQL Injection attacks that indeed lead to xss in in the student_form.php file at line 22. |
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/1tl9-EAxUR64Og9zS-nyUx3YtG1V32Monkvq-h39tjpw/edit?usp=sharing |
|---|
| उपयोगकर्ता | R0ck3t (UID 70759) |
|---|
| सबमिशन | 18/06/2024 08:16 PM (2 साल पहले) |
|---|
| संयम | 20/06/2024 07:26 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 269276 [SourceCodester Simple Student Attendance System 1.0 student_form.php get_student id क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|