| शीर्षक | Simple Cold Storage Management System v1.0 - Stored XSS in "First Name" |
|---|
| विवरण | # Exploit Title: Simple Cold Storage Management System v1.0 - Stored XSS in "First Name"
# Exploit Author: Rahul Singh
# Vendor Name: oretnom23
# Vendor Homepage: https://www.sourcecodester.com/php/15088/simple-cold-storage-management-system-using-phpoop-source-code.html
# Software Link: https://www.sourcecodester.com/php/15088/simple-cold-storage-management-system-using-phpoop-source-code.html
# Version: v1.0
# Tested on: Windows 10, Apache
Description : A Stored XSS in Simple Cold Storage Management System v1.0 allows an attacker to input arbitrary javascript code into those vulnerable parameters
Vulnerable Parameters:
First Name
Steps:
1) Login into account
2) Go to My Account
3) Now in Parameters "First Name" put your payload
Payload: <script>alert(1)</script>
4) Now save the user and our Java script payload will be stored.
5) As the payload has been stored in the database, the alert will trigger everytime user will go to My account page. |
|---|
| स्रोत | ⚠️ https://github.com/rsrahulsingh05/POC/blob/main/Stored%20XSS |
|---|
| उपयोगकर्ता | rsrahulsingh05 (UID 33994) |
|---|
| सबमिशन | 18/10/2022 01:38 PM (4 साल पहले) |
|---|
| संयम | 18/10/2022 02:37 PM (60 minutes later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 211201 [SourceCodester Simple Cold Storage Management System 1.0 My Account First Name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|