| शीर्षक | PHPGurukul Hostel Management System 3.0 Cross Site Scripting |
|---|
| विवरण | Several administrative views render student-controlled records directly into HTML without applying output encoding. Student names, complaint details, complaint types, feedback values, course names, and room values are echoed raw from the database. Because these fields are supplied through student registration, complaint submission, and feedback forms, an attacker who submits a crafted value can store script content that is executed when an administrator views the affected record.
|
|---|
| स्रोत | ⚠️ https://github.com/usernamevnq/CVEs/issues/9 |
|---|
| उपयोगकर्ता | n4k3r0 (UID 91985) |
|---|
| सबमिशन | 13/08/2026 05:33 AM (1 महीना पहले) |
|---|
| संयम | 14/09/2026 07:30 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 403405 [PHPGurukul Hostel Management System 3.0 manage-students.php क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|