| शीर्षक | CodeAstro HMS Hospital Management System 1.0 Stored XSS |
|---|
| विवरण | There are several stored xss vulnerabilities in different endpoints. The vulnerability arises from lack of input validation in the application. The web server imputs with POST request with input validation. When the attacker give an input with xss payload (like simple payload <script>alert(1)<script>) instead of normal input, the web application inserts this payload to the database directly after giving sql query. |
|---|
| स्रोत | ⚠️ https://github.com/EmilGallajov/zero-day/blob/main/codeastro_hms_stored_xss.md |
|---|
| उपयोगकर्ता | egsec (UID 77043) |
|---|
| सबमिशन | 20/11/2024 02:47 PM (2 साल पहले) |
|---|
| संयम | 25/11/2024 03:45 PM (5 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 286018 [CodeAstro Hospital Management System 1.0 his_doc_register_patient.php क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|