| शीर्षक | code-projects Pharmacy Management System 1.0 Code Injection |
|---|
| विवरण | An HTML Reflect vulnerability has been identified in the Pharmacy Management System version 1.0, specifically in the medicine management update functionality. This issue occurs due to the improper sanitization of the suppliers_name parameter during medicine record updates. This flaw allows malicious input to be reflected in the HTML response, enabling the injection of HTML or JavaScript code into the page.
Though the severity of this vulnerability is categorized as low, it can still be exploited for phishing attacks, content spoofing, or UI manipulation. This can mislead users with deceptive content and expose the system to reputational risks or social engineering attacks. Immediate action is advised to avoid any potential exploitation. |
|---|
| स्रोत | ⚠️ https://gist.github.com/higordiego/bfe50f72d11a24b1dc095a196872cea8 |
|---|
| उपयोगकर्ता | c4ttr4ck (UID 75518) |
|---|
| सबमिशन | 19/10/2024 07:22 PM (2 साल पहले) |
|---|
| संयम | 20/10/2024 08:50 PM (1 day later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 281024 [code-projects Pharmacy Management System 1.0 Manage Medicines Page /manage_medicine.php name/address/doctor_address/suppliers_name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|