| タイトル | CodeAstro Simple Hospital Management System in Python 1.0 Cross Site Scripting |
|---|
| 説明 | A critical Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Registred Patients file of CodeAstro Simple Hospital Management System in Python. Attackers can inject malicious JavaScript via the patname field (POST parameter), which gets persistently stored in the database and executed whenever the profile page is viewed. |
|---|
| ソース | ⚠️ https://github.com/Vanshdhawan188/Simple-Hospital-Management-System-in-Python-CodeAstro-Patients-Stored-XSS/blob/main/Simple%20Hospital%20Management%20System%20in%20Python%20CodeAstro%20Patients%20Stored%20XSS.md |
|---|
| ユーザー | Subhash Paudel (UID 66830) |
|---|
| 送信 | 2025年06月28日 22:07 (1 年 ago) |
|---|
| モデレーション | 2025年07月07日 07:51 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 315086 [CodeAstro Simple Hospital Management System 1.0 POST Parameter /patient.html クロスサイトスクリプティング] |
|---|
| ポイント | 18 |
|---|