| 제목 | SourceCodester Inventory System 1.0 Cross Site Scripting |
|---|
| 설명 | A Stored Cross-Site Scripting (XSS) vulnerability was discovered in SourceCodester Inventory System 1.0. The vulnerability exists in the Product Management page (/products.php). The application does not sanitize user-supplied input for the Product_Id and Product_Name parameters when saving a product via /api/products_handler.php?action=save. The malicious payload is stored in the database and executed in the browser of any user who visits products.php. DataTables renders stored data using innerHTML without encoding, allowing arbitrary JavaScript execution. The session cookie lacks the HttpOnly flag, enabling an attacker to steal admin session tokens via document.cookie and achieve full account takeover.
PoC:
POST /product_inventory/Product_Inventory/api/products_handler.php?action=save
Content-Type: application/x-www-form-urlencoded
Product_Id=<img src=x onerror="alert(document.cookie)">&Product_Name=<img src=x onerror="alert('XSS')">&Hsn_Code=123&Product_Code=123&Product_Cost=100&Selling_Price=200&Quantity=10&Low_Stock_Threshold=5
Steps:
1. Login as any authenticated user
2. Send the above POST request
3. Navigate to /products.php
4. JavaScript alert fires displaying the PHPSESSID cookie
5. Attacker uses stolen session to access admin dashboard |
|---|
| 원천 | ⚠️ https://github.com/Mohnad-AL-saif/MyCVEs/blob/main/VulDB/Inventory-System/CVE-01-XSS-products.md |
|---|
| 사용자 | Muhannad AlSaif (UID 101875) |
|---|
| 제출 | 2026. 10. 03. AM 12:37 (16 날 ago) |
|---|
| 모더레이션 | 2026. 10. 18. PM 07:10 (16 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 421919 [SourceCodester Inventory System 1.0 Product Management products_handler.php?action=save Product_Id/Product_Name 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|