| Titolo | https://code-projects.org/ https://code-projects.org/pharmacy-management-system-in-php-with-source-code/ 1.0 Stored XSS |
|---|
| Descrizione | To exploit stored XSS vulnerability, attackers inject script into the user input fields.For example, submitting the payload <script>alert(1)</script> in the user input field (updateprofile) and saving the data.
Application does not properly sanitize or validate the input, this script executed in the user’s browser, leading to an XSS attack. |
|---|
| Utente | vulrep (UID 71951) |
|---|
| Sottomissione | 27/08/2024 17:41 (2 anni fa) |
|---|
| Moderazione | 31/08/2024 07:35 (4 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 276261 [code-projects Pharmacy Management System 1.0 Update My Profile Page index.php?id=userProfileEdit fname/lname/email cross site scripting] |
|---|
| Punti | 16 |
|---|