| शीर्षक | SourceCodester Sales and Inventory System 1.0 Cross Site Scripting |
|---|
| विवरण | A reflected cross-site scripting (XSS) vulnerability exists in Sales and Inventory System 1.0. The vulnerability is located in the delete.php file. The application fails to sanitize the GET parameter 'id' before reflecting it in the response. An authenticated attacker can exploit this to execute arbitrary JavaScript in the victim's browser, potentially leading to session hijacking. |
|---|
| स्रोत | ⚠️ https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/XSS-Delete-id.md |
|---|
| उपयोगकर्ता | 563742137abc (UID 95813) |
|---|
| सबमिशन | 25/03/2026 02:56 AM (6 महीनों पहले) |
|---|
| संयम | 08/04/2026 05:13 PM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 356246 [SourceCodester Sales and Inventory System 1.0 GET Parameter /delete.php id क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|