| タイトル | code-projects Pharmacy Management System 1.0 Code Injection |
|---|
| 説明 | An HTML Reflect vulnerability has been identified in the Pharmacy Management System version 1.0, specifically during the customer information update process. The issue arises due to the lack of proper sanitization on the address parameter. Malicious input provided through this parameter is reflected directly in the HTML response, enabling attackers to inject HTML or JavaScript content into the page.
Although the severity of this vulnerability is categorized as low, it can still be exploited for phishing attacks, content spoofing, or user interface manipulation. This could lead to misleading information being presented to users, causing reputational damage or enabling social engineering attacks. Immediate action is recommended to mitigate the risk, even though it does not pose a critical security threat. |
|---|
| ソース | ⚠️ https://gist.github.com/higordiego/e5b7cd1e1c29eb53dc6685c0ceb51470 |
|---|
| ユーザー | c4ttr4ck (UID 75518) |
|---|
| 送信 | 2024年10月19日 19:26 (2 年 ago) |
|---|
| モデレーション | 2024年10月20日 20:49 (1 day later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 281023 [code-projects Pharmacy Management System 1.0 Manage Customer Page /manage_customer.php suppliers_name/address クロスサイトスクリプティング] |
|---|
| ポイント | 0 |
|---|