| शीर्षक | GitHub MateisHomePage-Website 1.0 Cross Site Scripting |
|---|
| विवरण | VULNERABILITY DESCRIPTION:
A Cross-Site Scripting (XSS) vulnerability was discovered in the MateisHomePage-Website. The application fails to properly sanitize or neutralize user-supplied input before rendering it back onto the webpage. An attacker can exploit this weakness by injecting a malicious script into the vulnerable search parameter located within the users.php script. This allows the execution of arbitrary JavaScript code in the context of an unsuspecting user's browser session whenever they view the affected account profile page.
The reported vulnerability is fixed after reporting to the github repo owner. The fix can be found in the closed issues by redirecting to this link
https://github.com/coolbeans1212/MateisHomePage-Website/issues/8
I am requesting for a CVE ID for the vulnerability i found
PROOF OF CONCEPT (PoC) / REPRODUCTION STEPS:
- Visit https://mateishome.page hosted in the GitHub Repository (https://github.com/coolbeans1212/MateisHomePage-Website)
- In the 'users.php' page there is a parameter named search which is vulnerable to XSS
- Then add this payload in the search parameter search="><script>alert(document.cookie)</script> |
|---|
| स्रोत | ⚠️ https://github.com/coolbeans1212/MateisHomePage-Website |
|---|
| उपयोगकर्ता | dexter-morgan (UID 100687) |
|---|
| सबमिशन | 22/08/2026 09:52 AM (1 महीना पहले) |
|---|
| संयम | 29/09/2026 06:37 PM (1 month later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 411182 [coolbeans1212 MateisHomePage-Website तक ea2a4226deeca27ab1fb9df0552ec76444547811 users.php खोज क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|