| शीर्षक | Unauthenticated Cross Site Scripting Vulnerability in Sanitization Management System |
|---|
| विवरण | The Sanitization Management System distributed by sourcecodester.com (https://www.sourcecodester.com/php/15770/sanitization-management-system-project-php-and-mysql-free-source-code.html) is vulnerable to unauthenticated Cross Site Scripting (php-sms/?p=request_quote). An attacker can craft a malicious Quote Request where both the Address and the Remarks Input Fields can be abused. Since the cookie does not have the HttpOnly flag it can be stolen whenever a logged-in user opens the Request in the Management Dashboard. |
|---|
| उपयोगकर्ता | maikroservice (UID 35150) |
|---|
| सबमिशन | 05/11/2022 11:37 AM (4 साल पहले) |
|---|
| संयम | 11/11/2022 08:18 AM (6 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 213449 [SourceCodester Sanitization Management System 1.0 Quote Requests Form php-sms/?p=request_quote क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|