| शीर्षक | CodeAstro Ecommerce Website in PHP MySQL 1.0 Stored Cross Site Scripting |
|---|
| विवरण | A stored Cross-Site Scripting (XSS) vulnerability in the Ecommerce Website in PHP MySQL with Source Code application allows attackers to inject arbitrary JavaScript into the username field. The malicious payload is stored in the database and is executed in the browser of any user who views the affected page, such as the home page after login. Successful exploitation could lead to session hijacking, account takeover, phishing, or other malicious actions in the context of the victim’s session. |
|---|
| स्रोत | ⚠️ https://gist.github.com/0xSebin/bb6781e5977bda36610fda20861a5bbe |
|---|
| उपयोगकर्ता | 0xSebin (UID 35195) |
|---|
| सबमिशन | 09/08/2025 09:13 AM (1 वर्ष पहले) |
|---|
| संयम | 20/08/2025 12:57 PM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 320770 [CodeAstro Ecommerce Website 1.0 Edit Your Account Page my_account.php?edit_account username क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|