| शीर्षक | https://github.com/xnx3/wangmarket wangmarket 4.9 Improper Neutralization of Alternate XSS Syntax |
|---|
| विवरण | A reflective cross-site scripting (XSS) vulnerability was discovered in the Wangmarket 4.9 version. This vulnerability is located in the /admin/system/variableList.do interface, which is used to manage system-level variables. Due to the application's failure to properly clean or neutralize the user input included in the HTTP request, attackers can construct a URL containing a malicious JavaScript payload. When the victim is tricked into clicking this malicious link, the payload will be sent to the server along with the request. The server then immediately reflects the malicious script in the HTTP response and executes it in the victim's browser. |
|---|
| स्रोत | ⚠️ https://www.yuque.com/cocount-eveo/lu0220/flbu025pfmwgudmg?singleDoc#%20%E3%80%8AXSS%20Cross-Site%20Scripting%20Attack%E3%80%8B |
|---|
| उपयोगकर्ता | eveo (UID 93828) |
|---|
| सबमिशन | 26/12/2025 09:57 AM (10 महीनों पहले) |
|---|
| संयम | 04/01/2026 09:47 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 339485 [xnx3 wangmarket तक 4.9 Backend Variable Search variableList.do variableList Description क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|