| タイトル | SourceCodester Simple Traffic Offense System using PHP with Source Code 1.0 Missing Authorization |
|---|
| 説明 | The application exposes a settings update endpoint, save-settings.php, that does not enforce server-side authentication or authorization. An attacker can send a crafted request directly to this endpoint, modify site configuration values such as site_name and site_desc, and persist malicious script payloads in the application's settings.
Those values are later rendered into HTML without proper output encoding in pages such as login.php and sidebar.php, resulting in stored XSS.
This issue combines two security failures:
unauthenticated modification of critical site settings
improper output encoding leading to persistent cross-site scripting
The backend endpoint save-settings.php accepts settings changes without verifying that the caller is authenticated and authorized to change application-wide configuration.
In addition, the application renders settings values such as site_name and site_desc directly into HTML in login.php and sidebar.php without proper encoding or sanitization. As a result, attacker-controlled content persists in the database and executes in the browser when the affected pages are loaded. |
|---|
| ソース | ⚠️ https://github.com/tan1540684326-QAQ/cve/issues/3 |
|---|
| ユーザー | LiuHeQi (UID 99807) |
|---|
| 送信 | 2026年07月27日 10:29 (1 月 ago) |
|---|
| モデレーション | 2026年09月06日 17:55 (1 month later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 399456 [SourceCodester Simple Traffic Offense System 1.0 Settings Update Endpoint save-settings.php site_name/site_desc クロスサイトスクリプティング] |
|---|
| ポイント | 20 |
|---|