| タイトル | code-projects Simple Food Ordering System 1.0 Improper Neutralization of Alternate XSS Syntax |
|---|
| 説明 | This code segment is vulnerable to stored Cross-Site Scripting (XSS) attacks because it outputs database content directly into the HTML page without proper escaping. An attacker can inject malicious JavaScript code into fields such as product name or category name. When a user visits the order page, the injected script will execute in their browser.
Theft of user cookies or session tokens, leading to account hijacking.
Execution of unauthorized actions on behalf of the user (such as placing orders or changing account details).
Display of fake content or phishing forms to trick users into revealing sensitive information.
Potential spread of malware if malicious scripts are injected. |
|---|
| ソース | ⚠️ https://github.com/asd1238525/cve/blob/main/xss3.md |
|---|
| ユーザー | yunlin (UID 79129) |
|---|
| 送信 | 2025年09月17日 09:06 (1 年 ago) |
|---|
| モデレーション | 2025年09月21日 21:44 (5 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 325194 [code-projects Simple Food Ordering System 1.0 /ordersimple/order.php id クロスサイトスクリプティング] |
|---|
| ポイント | 20 |
|---|