| शीर्षक | SourceCodester Clinic Queuing System using PHP and SQlite3 1.0 Cross Site Scripting |
|---|
| विवरण | The patient_side.php page contains a Stored Cross-Site Scripting vulnerability. Specifically, the input fields for Full Name, Contact, and Address do not properly sanitize user input, allowing malicious scripts to be stored and executed on the page. This poses a security risk as it enables attackers to perform actions like stealing session cookies, redirecting users to malicious sites, or performing actions on behalf of the admin. |
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/14ExrgXqPQlgvjw2poqNzYzAOi-C5tda-XBJF513yzag/edit?usp=sharing |
|---|
| उपयोगकर्ता | R0ck3t (UID 70759) |
|---|
| सबमिशन | 22/06/2024 07:15 PM (2 साल पहले) |
|---|
| संयम | 23/06/2024 11:34 AM (16 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 269485 [SourceCodester Clinic Queuing System 1.0 patient_side.php save_patient Full Name/Contact/Address क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|