| शीर्षक | SourceCodester Prison Management System 1.0 Cross Site Scripting |
|---|
| विवरण | The application "Prison Management System 1.0" by SourceCodester has been found to contain two instances of stored cross-site scripting (XSS) vulnerabilities in the /Employee/edit-profile.php component. These vulnerabilities allow an attacker to inject malicious scripts into the application, which are then stored and later executed in the context of other users' browsers. When an unsuspecting user accesses the affected page, the malicious script executes, potentially leading to unauthorized actions such as session hijacking, redirection to malicious sites, or data theft. These vulnerabilities could be exploited by attackers to compromise the security and integrity of the application and its users. |
|---|
| स्रोत | ⚠️ https://github.com/CYB84/CVE_Writeup/blob/main/XSS.md |
|---|
| उपयोगकर्ता | Raj Nandi (UID 73232) |
|---|
| सबमिशन | 12/08/2024 02:26 PM (2 साल पहले) |
|---|
| संयम | 14/08/2024 04:01 PM (2 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 263116 [SourceCodester Prison Management System 1.0 edit-profile.php क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|