| 제목 | gedelumbung HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8 Cross Site Scripting |
|---|
| 설명 | The affected components are `application/modules/web/controllers/contact.php::kirim()` (unauthenticated entry), `application/modules/admin/views/contact/bg_home.php` / `bg_input.php`, and `application/models/app_global_admin_model.php::generate_index_contact()`. The `kirim()` action persists `$_POST['nama']`, `$_POST['email']`, `$_POST['alamat']`, `$_POST['telepon']`, and `$_POST['pesan']` directly into `dlmbg_contact` without sanitization:
```php
// application/modules/web/controllers/contact.php
function kirim()
{
$in['nama'] = $_POST['nama'];
$in['email'] = $_POST['email'];
$in['alamat'] = $_POST['alamat'];
$in['telepon'] = $_POST['telepon'];
$in['pesan'] = $_POST['pesan'];
$this->db->insert("dlmbg_contact",$in);
...
}
```
The admin list view (`generate_index_contact`) and the edit form (`bg_input.php`) echo `$h->nama`, `$h->email`, `$h->telepon`, `$h->alamat`, and `$h->pesan` unescaped. The `pesan` and `alamat` fields are loaded inside `<textarea class="ckeditor">` blocks, so the stored HTML/JS survives CKEditor round-trips and fires whenever an admin opens or saves the entry.
|
|---|
| 원천 | ⚠️ https://github.com/gedelumbung/HospitalManagement/issues/14 |
|---|
| 사용자 | lixiang (UID 101908) |
|---|
| 제출 | 2026. 10. 09. PM 01:53 (14 날 ago) |
|---|
| 모더레이션 | 2026. 10. 22. PM 09:33 (13 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 425387 [gedelumbung HospitalManagement 까지 c2d45543789a3887067d3915f69d44cfc2cf76a8 Contact Form contact.php kirim nama/email/alamat/telepon/pesan 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|