| शीर्षक | OcoMon 5.0RC1 Injection |
|---|
| विवरण | Description: Injection can result in the modification of web page content or the execution of malicious scripts, leading to the theft of sensitive information, malware distribution, phishing attacks, defacement of websites, or denial of service. It can have a significant impact on the reputation and security of a website and the organization that runs it.
Impact: The impact includes the theft of sensitive information like cookies, session tokens, or user credentials, leading to account hijacking or identity theft. Additionally, attackers can manipulate site content, spread malware, or perform actions on behalf of users, compromising the integrity and security of the website.
#Steps to Reproduce
1). Navigate to - https://IP/newUser.php/ and https://IP/includes/common/require_access_recovery.php/
2). Insert the generic payload after "/"
Payload : "><script>alert(1)</script> | "><h1>Injection</h1>
Mitigation:
1. Input Validation and Sanitization
2. Output Encoding
3. Content Security Policy (CSP)
4. Use of Secure Libraries and Frameworks
5. Database Escaping |
|---|
| उपयोगकर्ता | The_Druk (UID 70236) |
|---|
| सबमिशन | 14/08/2024 05:56 AM (2 साल पहले) |
|---|
| संयम | 14/08/2024 08:21 PM (14 hours later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 274205 [OcoMon 4.0/4.0RC1/5.0RC1 URL require_access_recovery.php क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|