提出 #728898: campcodes Park Ticketing System V1.0 Cross Site Scripting情報

タイトルcampcodes Park Ticketing System V1.0 Cross Site Scripting
説明The 'ride' parameter in the admin_class.php file of PHPGurukul Park Ticketing System v1.0 is vulnerable to Stored Cross-Site Scripting (XSS). This vulnerability is a result of inadequate input validation and sanitization of user-provided data. An attacker could take advantage of this flaw by injecting malicious scripts into these parameters. Once stored on the server, these scripts may execute when other users access the affected user's profile.
ソース⚠️ https://github.com/LaneyYu/cve/issues/9
ユーザー
 Laney (UID 83684)
送信2026年01月01日 06:16 (9 月 ago)
モデレーション2026年01月01日 09:56 (4 hours later)
ステータス重複
VulDBエントリ338599 [Campcodes Park Ticketing System 1.0 admin_class.php save_pricing name/ride クロスサイトスクリプティング]
ポイント0

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!