| शीर्षक | Wedding Hall Booking System Exists Multiple Cross-Site Scripting Vulnerabilities |
|---|
| विवरण | The Wedding Hall Booking System published in SourceCodester has multiple Cross-site scripting vulnerabilities. The system does not do anything with input and output. Attackers can construct malicious code to steal user and administrator cookies.
Attackers can enter malicious code on Booking Form, index.php?page=contact_us, index.php?page=manage_account, /admin/?page=user and other pages to perform Cross-site scripting attacks, which will trigger on any output page. |
|---|
| स्रोत | ⚠️ https://github.com/Jamison2022/Wedding-Hall-Booking-System/blob/main/WHBS-XSS.md |
|---|
| उपयोगकर्ता | Jamison (UID 30712) |
|---|
| सबमिशन | 06/08/2022 11:03 AM (4 साल पहले) |
|---|
| संयम | 06/08/2022 06:47 PM (8 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 205812 [SourceCodester Wedding Hall Booking System Contact Page /whbs/?page=contact_us Message क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|