| शीर्षक | SourceCodester Sales and Inventory System 1.0 Cross Site Scripting |
|---|
| विवरण | A stored cross-site scripting (XSS) vulnerability exists in Sales and Inventory System 1.0. The flaw is located in the file update_details.php within the Store Settings module. The application fails to sanitize the POST parameter 'website' before storing it in the database. This allows an authenticated attacker to inject arbitrary JavaScript that executes whenever the store details are viewed. |
|---|
| स्रोत | ⚠️ https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/XSS-UpdateDetails-website.md |
|---|
| उपयोगकर्ता | 563742137abc (UID 95813) |
|---|
| सबमिशन | 25/03/2026 02:59 AM (6 महीनों पहले) |
|---|
| संयम | 08/04/2026 05:12 PM (15 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 354200 [SourceCodester Sales and Inventory System 1.0 POST Request update_details.php website क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|