| शीर्षक | code-projects Blood Bank Management System 1.0 Cross Site Scripting |
|---|
| विवरण | A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the blood request functionality of the BloodBank Management System. This flaw occurs because the msg parameter is not properly sanitized before being rendered on the web page. This allows an attacker to inject malicious JavaScript code, which will be executed when the page is accessed.
Successful exploitation can lead to session hijacking, redirection to phishing sites, or unauthorized actions on behalf of the victim. Additionally, this could be exploited for social engineering attacks or to spread malware.
|
|---|
| स्रोत | ⚠️ https://gist.github.com/higordiego/62ad5208270c67834d02818d6ba44126 |
|---|
| उपयोगकर्ता | c4ttr4ck (UID 75518) |
|---|
| सबमिशन | 25/10/2024 11:25 PM (2 साल पहले) |
|---|
| संयम | 26/10/2024 03:44 PM (16 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 281960 [code-projects Blood Bank Management System 1.0 /bloodrequest.php msg क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|