| タイトル | Online Pizza Ordering System has Stored XSS vulnerability |
|---|
| 説明 | BUG_Author: Murasaki
URL：http://localhost/php-opos/index.php?page=checkout
Link:https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html
There is a stored XSS vulnerability in the order submission,attackers can use XSS injection to steal the identity authentication of administrative users, and perform some background operations as administrators to achieve CSRF attacks. Attackers can also hang horses on websites, so that visitors' browsers can be controlled by attackers.
|
|---|
| ソース | ⚠️ https://github.com/1MurasaKi/PizzeXSS_Report/blob/main/Online%20Pizza%20Ordering%20System/README.md |
|---|
| ユーザー | Murasaki (UID 41555) |
|---|
| 送信 | 2023年02月22日 02:53 (4 年 ago) |
|---|
| モデレーション | 2023年02月23日 16:20 (2 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 221680 [SourceCodester Online Pizza Ordering System 1.0 index.php?page=checkout クロスサイトスクリプティング] |
|---|
| ポイント | 20 |
|---|