| Titolo | SourceCodester Student Study Center Desk Management System 1.0 Cross Site Scripting |
|---|
| Descrizione | ## Details
### Related Code file:
`/sscdms/classes/Users.php?f=save`
### XSS parameter:
`firstname`
In the POST request, the "firstname" parameter is vulnerable to Cross Site Scripting.
## Payload
```
<script>print()</script>
```
## Report link: https://reports-kunull.vercel.app/CVE%20research/student-study-center-desk-management-system-xss-firstname |
|---|
| Fonte | ⚠️ https://www.sourcecodester.com/php/16298/student-study-center-desk-management-system-using-php-oop-and-mysql-db-free-source-code |
|---|
| Utente | Anonymous User |
|---|
| Sottomissione | 15/07/2024 11:31 (2 anni fa) |
|---|
| Moderazione | 16/07/2024 21:28 (1 day later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 271706 [SourceCodester Student Study Center Desk Management System 1.0 HTTP POST Request Users.php?f=save firstname/middlename/lastname/username cross site scripting] |
|---|
| Punti | 19 |
|---|