| शीर्षक | Movie Ticket Booking System-PHP-There is a storage XSS vulnerability |
|---|
| विवरण | Building environment：Apache2.4.49；MySQL5.7.26；PHP7.3.4
Movie Ticket Booking System-PHP-There is a storage XSS vulnerability
At editBooking In PHP, from the 63rd line of code to the 70th line of code, the content entered by the user is directly stored in the database without filtering, and then displayed and processed in view.php, and then viewed In PHP, from line 91 to line 101, the content input by the front end is directly output without any tag closing |
|---|
| स्रोत | ⚠️ https://github.com/aman05382/movie_ticket_booking_system_php/issues/4 |
|---|
| उपयोगकर्ता | ace. (UID 34853) |
|---|
| सबमिशन | 01/12/2022 03:11 AM (4 साल पहले) |
|---|
| संयम | 01/12/2022 08:23 AM (5 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 214628 [Movie Ticket Booking System editBooking.php क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|