जमा करें #426885: code-projects Pharmacy Management System 1.0 Cross Site Scriptingजानकारी

शीर्षकcode-projects Pharmacy Management System 1.0 Cross Site Scripting
विवरणA stored XSS vulnerability has been identified in the Pharmacy Management System version 1.0, specifically within the medicine update functionality. This vulnerability arises due to the absence of proper input sanitization in the suppliers_name parameter. An attacker can inject malicious JavaScript code, which will be stored persistently in the database and executed every time the medicine record is accessed.
स्रोत⚠️ https://gist.github.com/higordiego/93343006341d3799de0cb8912cc328ec
उपयोगकर्ता
 c4ttr4ck (UID 75518)
सबमिशन19/10/2024 06:09 PM (2 साल पहले)
संयम20/10/2024 08:49 PM (1 day later)
स्थितिस्वीकृत
VulDB प्रविष्टि281023 [code-projects Pharmacy Management System 1.0 Manage Customer Page /manage_customer.php suppliers_name/address क्रॉस साइट स्क्रिप्टिंग]
अंक20

Interested in the pricing of exploits?

See the underground prices here!