| शीर्षक | SourceCodester Daily Calories Monitoring Tool 1.0 Cross Site Scripting |
|---|
| विवरण | The calorie_date, calorie_name parameters are vulnerable to the tested XSS payload: <IMG """"><SCRIPT>alert("XSS")</SCRIPT>"> . The code catches a PDOException and directly echoes the error message using $e->getMessage(). If an attacker can manipulate the database interaction to cause an error that includes malicious script content, that content would be output directly to the user's browser.
|
|---|
| स्रोत | ⚠️ https://github.com/jadu101/CVE/blob/main/SourceCodester_Daily_Calories_Monitoring_Tool_add_calorie_XSS.md |
|---|
| उपयोगकर्ता | jadu101 (UID 70632) |
|---|
| सबमिशन | 23/08/2024 02:34 PM (2 साल पहले) |
|---|
| संयम | 24/08/2024 12:28 AM (10 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 275721 [SourceCodester Daily Calories Monitoring Tool 1.0 add-calorie.php calorie_date/calorie_name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|