| शीर्षक | ttttonyhe OBlog (ttttonyhe/oblog) 0/0 Cross Site Scripting (XSS) - Reflected |
|---|
| विवरण | The OBlog application (ttttonyhe/oblog) is vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability in the tags.php file.
The 'tag' parameter is taken directly from the URL ($_GET['tag']) and echoed into the HTML response without any sanitization or escaping.
An attacker can craft a malicious URL containing JavaScript code in the 'tag' parameter. When a victim clicks on this link, the JavaScript executes in their browser context, potentially leading to session theft, credential harvesting, or other malicious actions. |
|---|
| स्रोत | ⚠️ https://gist.github.com/hackusman/a1ba43253d6a62ace31ef39ec325e973 |
|---|
| उपयोगकर्ता | hackus_man (UID 95738) |
|---|
| सबमिशन | 16/06/2026 06:31 PM (2 महीनों पहले) |
|---|
| संयम | 05/08/2026 05:49 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 386259 [ttttonyhe OBlog तक 3ca6a45a2fcc81f6086751d8af124658720e8f8f /tags.php दिन क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|