| शीर्षक | code-projects Pharmacy Management System 1.0 Cross Site Scripting |
|---|
| विवरण | A stored XSS vulnerability has been identified in the Pharmacy Management System version 1.0, specifically within the customer update functionality. This flaw occurs because user input fields, such as the name, address, or doctor_address parameters, are not properly sanitized. An attacker can inject malicious JavaScript code, which is stored in the database and executed each time the affected page is accessed.
The persistence of this XSS attack poses a high risk, as it can impact both administrators and users by enabling:
Session hijacking
Theft of sensitive information (e.g., login credentials)
Privilege escalation
Defacement or manipulation of web content
This vulnerability could allow attackers to perform more dangerous actions, such as stealing authentication cookies or altering critical data without detection. |
|---|
| स्रोत | ⚠️ https://gist.github.com/higordiego/0dae6dd4a36acd12bcc408caf1c787d9 |
|---|
| उपयोगकर्ता | c4ttr4ck (UID 75518) |
|---|
| सबमिशन | 19/10/2024 07:16 PM (2 साल पहले) |
|---|
| संयम | 20/10/2024 08:49 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 281024 [code-projects Pharmacy Management System 1.0 Manage Medicines Page /manage_medicine.php name/address/doctor_address/suppliers_name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|