| タイトル | phpgurukul Human Metapneumovirus (HMPV) – Testing Management System 1.0 Cross Site Scripting |
|---|
| 説明 | The `search-report.php` page is vulnerable to Cross-Site Scripting (XSS) attacks. Due to insufficient filtering and escaping of search input, an attacker can inject malicious script code (e.g., `<script>alert('xss')</script>`) into the search box and click the "search" button, causing a warning dialog to appear. This vulnerability can be exploited to steal sensitive user information, manipulate browsers, and pose threats to user privacy and system security. |
|---|
| ソース | ⚠️ https://github.com/sorcha-l/cve/blob/main/Human%20Metapneumovirus%20(HMPV)%20%E2%80%93%20Testing%20Management%20System%20%20XSS%20in%20search-report.php.md |
|---|
| ユーザー | lxk_ (UID 81990) |
|---|
| 送信 | 2025年03月05日 09:51 (2 年 ago) |
|---|
| モデレーション | 2025年03月07日 07:01 (2 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 298896 [PHPGurukul Human Metapneumovirus Testing Management System 1.0 Search Report Page /search-report.php クロスサイトスクリプティング] |
|---|
| ポイント | 20 |
|---|