| Titolo | codeastro Vehicle Booking System 1.0 Stored XSS |
|---|
| Descrizione | the Vehicle management system is Vulnerable to Stored XSS .in the User Feedback form (usr/user-give-feedback.php) and the affected page is admin's view feed back form in admin-view-feedback.php and this vulnerabilities can be used to get malicious XSS payloads in the admin page like for cookie stealing.and other many other XSS payloads |
|---|
| Fonte | ⚠️ https://drive.google.com/file/d/1bao4YK4GwvAvCdCrsW5UpJZdvREdc_Yj/view?usp=sharing |
|---|
| Utente | vipindas (UID 61015) |
|---|
| Sottomissione | 06/01/2024 11:24 (3 anni fa) |
|---|
| Moderazione | 09/01/2024 15:00 (3 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 250114 [CodeAstro Vehicle Booking System 1.0 Feedback Page user-give-feedback.php My Testemonial cross site scripting] |
|---|
| Punti | 18 |
|---|