| Titolo | gedelumbung HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8 Cross Site Scripting |
|---|
| Descrizione | The affected components are `application/modules/web/controllers/buku_tamu.php::kirim()` (unauthenticated entry), `application/modules/admin/views/buku_tamu/bg_home.php` / `bg_input.php` and `application/models/app_global_admin_model.php::generate_index_buku_tamu()`. The `kirim()` action inserts `$_POST['nama']`, `$_POST['email']` and `$_POST['pesan']` directly into `dlmbg_buku_tamu` without any sanitization:
```php
// application/modules/web/controllers/buku_tamu.php
function kirim()
{
$in['nama'] = $_POST['nama'];
$in['email'] = $_POST['email'];
$in['pesan'] = $_POST['pesan'];
$in['st'] = 0;
$this->db->insert("dlmbg_buku_tamu",$in);
$this->session->set_flashdata("hasil","Data anda telah terkirim, ...");
redirect("web/buku_tamu");
}
```
The admin render path echoes those columns raw. In `application/models/app_global_admin_model.php::generate_index_buku_tamu()` (lines 818-820):
```php
$hasil .= "<tr><td>".$i." </td><td>".$h->nama." </td><td>".$h->email." </td>
```
In `application/models/app_global_web.php::generate_index_buku_tamu()` (lines 117-128):
```php
<td>'.$h->nama.'</td>
...
<td>'.$h->email.'</td>
...
<td>'.$h->pesan.'</td>
```
The `bg_input.php` view echoes `$nama`, `$email` and `$pesan` inside `value="..."` and a `<textarea>` without escaping. The `'st' => 0` value means the entry starts as `unapproved`, but the approval flow (`admin/data_buku_tamu/approve/{id}/1`) only flips a flag without re-encoding the stored content. Therefore the XSS executes both in the admin listing (`bg_home.php`) and in the admin edit form (`bg_input.php`). |
|---|
| Fonte | ⚠️ https://github.com/gedelumbung/HospitalManagement/issues/13 |
|---|
| Utente | Chenshiyi (UID 100261) |
|---|
| Sottomissione | 25/08/2026 15:33 (1 mese fa) |
|---|
| Moderazione | 29/09/2026 19:26 (1 month later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 411506 [gedelumbung HospitalManagement fino a c2d45543789a3887067d3915f69d44cfc2cf76a8 Guest Book buku_tamu.php kirim nama/email/pesan cross site scripting] |
|---|
| Punti | 20 |
|---|