| शीर्षक | givanz Vvveb 1.0.7.2 Cross Site Scripting |
|---|
| विवरण | A Reflected Cross-Site Scripting (XSS) vulnerability (CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')) exists in the user login form. The email and password parameters are not sanitized before being reflected in the HTML response. This allows an attacker to inject malicious scripts by crafting a special URL, leading to credential theft via a keylogger payload. This was confirmed by exfiltrating password data to a Burp Collaborator server. |
|---|
| स्रोत | ⚠️ https://github.com/kwerty138/Reflected-XSS-in-Vvveb-CMS-v1.0.7.2 |
|---|
| उपयोगकर्ता | andyp138 (UID 88373) |
|---|
| सबमिशन | 22/08/2025 05:05 AM (1 वर्ष पहले) |
|---|
| संयम | 30/08/2025 03:47 PM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 322017 [givanz Vvveb 1.0.7.2 login.tpl Email/Password क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|