| शीर्षक | CampCodes School Management Software 1.0 Cross Site Scripting |
|---|
| विवरण | Vendor and Product Information:
Vendor: CampCodes
Product: School Management Software
Product URL: https://www.campcodes.com/downloads/school-management-software-in-php-mysql-full-source-code/
Vulnerability Name: Stored Cross Site Scripting (XSS)
Description:
The web application has a stored cross-site scripting (XSS) vulnerability in the add photo to image gallery option. An malicious user can insert malicious JavaScript into the "Name" and "Description" form field and upload image of their choice. As a result, when other users or normal viewers try to view the gallery section of the website, the javascript payload will be triggered and load a pop up with any message of user choice.
Payload:
<img src=x onerror=alert(1)>
|
|---|
| स्रोत | ⚠️ https://github.com/KhukuriRimal/Vulnerabilities/blob/main/CampCodes%20-%20School%20Management%20Software%20-%20Stored%20Cross%20Site%20Scripting.pdf |
|---|
| उपयोगकर्ता | khukuririmal (UID 80171) |
|---|
| सबमिशन | 14/01/2025 06:53 AM (2 साल पहले) |
|---|
| संयम | 17/01/2025 09:50 PM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 292494 [CampCodes School Management Software 1.0 Photo Gallery Page /photo-gallery विवरण क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|