| Titolo | codeastro Vehicle Booking System 1.0 Stored XSS |
|---|
| Descrizione | The user register in the Vehicle Booking System by codeastro is vulnerable to Stored XSS vulnerability and there are multiple vulnerable parameter Full_Name,Last_Name,Address and the XSS is in affected at the admin page for managing user and view user page and basic XSS payload <script>alert(document.cookie)</script> |
|---|
| Fonte | ⚠️ https://drive.google.com/file/d/1ihxLw4kzbAbDhHtca3UnTaB-iMWHi5DJ/view?usp=sharing |
|---|
| Utente | vipindas (UID 61015) |
|---|
| Sottomissione | 06/01/2024 10:49 (3 anni fa) |
|---|
| Moderazione | 09/01/2024 15:00 (3 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 250113 [CodeAstro Vehicle Booking System 1.0 User Registration usr/usr-register.php Full_Name/Last_Name/Address cross site scripting] |
|---|
| Punti | 19 |
|---|