| Titolo | SourceCodester Service Provider Management System using PHP and MySQL 1.0 Cross Site Scripting |
|---|
| Descrizione | The vulnerability resides in the file system_info/index.php. Input from users in the System Name and System Short Name fields is not properly sanitized, allowing for Cross-Site Scripting (XSS) attacks to be executed. |
|---|
| Fonte | ⚠️ https://docs.google.com/document/d/1upC4101Ob9UW7fGC_valsEa45Q5xuBgcKZhs1Q-WoBM/edit?usp=sharing |
|---|
| Utente | R0ck3t (UID 70759) |
|---|
| Sottomissione | 22/06/2024 07:55 (2 anni fa) |
|---|
| Moderazione | 22/06/2024 17:41 (10 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 269479 [SourceCodester Service Provider Management System 1.0 System Info Page system_info/index.php System Name/System Short Name cross site scripting] |
|---|
| Punti | 17 |
|---|