| शीर्षक | SourceCodester E-Learning System (CAIWL) 1.0 Cross Site Scripting |
|---|
| विवरण | A Critical Stored Cross-Site Scripting (XSS) vulnerability was identified in the E-Learning System (CAIWL) v1.0 within the Lesson Module. The vulnerability arises from unrestricted file uploads that allow an attacker to upload malicious .svg (Scalable Vector Graphics) files containing embedded JavaScript. When an administrator or user views the uploaded file via the built-in viewer, the malicious script executes immediately in the victim's browser, leading to potential session hijacking and unauthorized administrative actions. |
|---|
| स्रोत | ⚠️ https://gist.github.com/0xCaptainFahim/fb42f3545623bc4740761b085070076d |
|---|
| उपयोगकर्ता | 0xCaptainFahim (UID 86447) |
|---|
| सबमिशन | 10/01/2026 07:49 AM (9 महीनों पहले) |
|---|
| संयम | 18/01/2026 03:03 PM (8 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 296574 [SourceCodester E-Learning System 1.0 List of Lessons Page index.php अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|