| タイトル | PHPGurukul Company Visitor Management System PHP V2.0 Stored Cross-Site Scripting (CWE-79) |
|---|
| 説明 | During the security review of "Company Visitor Management System PHP V2.0", I discovered a stored Cross-Site Scripting vulnerability in the "/manage-newvisitors.php" file. This vulnerability stems from insufficient input validation and output encoding of the 'fullname' parameter. The data flow is as follows: (1) '/visitors-form.php' accepts the 'fullname' parameter from a POST request and inserts it directly into the database via an unsanitized SQL INSERT query; (2) '/manage-newvisitors.php' retrieves the stored data with a SQL SELECT query and echoes it into an HTML table using raw PHP echo statements without htmlspecialchars() or any other output encoding. An attacker who can submit a visitor record (authenticated admin, or unauthenticated via the SQL injection login bypass in /index.php) can store a JavaScript payload in the FullName field. The script then executes in the browser of any administrator who views the visitor list, search results, visitor details, or date range reports. Immediate remedial measures are needed to ensure system security and protect data integrity. |
|---|
| ソース | ⚠️ https://github.com/mzxqqwq/CVE/issues/3 |
|---|
| ユーザー | mzxqqwq (UID 99169) |
|---|
| 送信 | 2026年06月21日 13:55 (2 月 ago) |
|---|
| モデレーション | 2026年08月07日 10:12 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 386952 [PHPGurukul Company Visitor Management System 1.0 /manage-newvisitors.php fullname クロスサイトスクリプティング] |
|---|
| ポイント | 20 |
|---|