| शीर्षक | Sanitization Management System v1.0 Stored Cross Site Scripting |
|---|
| विवरण | In Sanitization Management System v1.0, several parameters do not have sufficient input sanitization mechanisms which led to successful execution of cross-site scripting payloads.
Affected parameters:
1. name (Endpoint: /php-sms/classes/SystemSettings.php)
2. shortname (Endpoint: /php-sms/classes/SystemSettings.php)
3. message (Endpoint: /php-sms/classes/Master.php)
Affected Sink:
1. Entire application for /php-sms/classes/SystemSettings.php
2. /php-sms/admin/?page=inquiries/view_inquiry for /php-sms/classes/Master.php
References:
https://www.sourcecodester.com/php/15770/sanitization-management-system-project-php-and-mysql-free-source-code.html |
|---|
| उपयोगकर्ता | jiajian (UID 34329) |
|---|
| सबमिशन | 23/10/2022 06:59 PM (4 साल पहले) |
|---|
| संयम | 24/10/2022 07:40 AM (13 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 212015 [SourceCodester Sanitization Management System 1.0 SystemSettings.php name/shortname क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|