| タイトル | PHPGurukul Zoo Management System V2.1 Cross Site Scripting |
|---|
| 説明 | During the security assessment of the "Zoo Management System", I identified a critical Cross Site Scripting (XSS) vulnerability in the "/admin/add-foreigner-ticket.php" file. This vulnerability stems from the insufficient sanitization of user input provided through the "visitname" parameter. Due to this weakness, attackers can inject malicious JavaScript code that is subsequently executed in the context of other users’ browsers. Exploiting this flaw could lead to session hijacking, unauthorized operations, and leakage of sensitive information. Immediate remediation measures are necessary to protect user data, prevent privilege escalation, and maintain the integrity of the system. |
|---|
| ソース | ⚠️ https://github.com/xiguala123/myCVE/issues/7 |
|---|
| ユーザー | xiguala123 (UID 84472) |
|---|
| 送信 | 2025年08月06日 08:58 (10 月 ago) |
|---|
| モデレーション | 2025年08月13日 23:51 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 320068 [PHPGurukul Zoo Management System 2.1 add-foreigner-ticket.php visitorname クロスサイトスクリプティング] |
|---|
| ポイント | 20 |
|---|